Spanish Energy Giant Endesa Notifies Customers of Data Breach Impacting Energía XXI

Endesa/Energía XXI has detected unauthorized access to its commercial platform resulting in a data breach affecting customers of the regulated Energía XXI service; exposed information may include basic identification, contact details, national ID numbers, contract data, and possible IBAN/payment details. Endesa says passwords were not compromised, has activated incident response measures (blocking accounts, log analysis, enhanced monitoring), notified the Spanish Data Protection Agency, and is investigating with internal and external teams while warning customers about potential phishing and impersonation risks.