Threat actor claims the theft of full customer data from Spanish energy firm Endesa

**Endesa data breach:** Endesa disclosed unauthorized access to its commercial platform with potential exfiltration of full customer data — including contact details, national ID numbers, contract data and possibly IBANs — and a threat actor claims to be selling ~1.05 TB (reported ~20M records) on a cybercrime forum; Endesa has notified customers and authorities, reports no current evidence of misuse, and is investigating.