Spanish energy giant Endesa discloses data breach affecting customers

### Executive summary Endesa and its Energía XXI operator disclosed unauthorized access to their commercial platform that exposed customers' personal and contract-related data (basic identification, contact details, national ID numbers, contract information, and IBANs); threat actors claim to be selling ~1TB/20M records. The company reports no password exposure, has blocked compromised internal accounts, notified regulators, and is monitoring for misuse while the investigation continues.