Total Energies

In July 2024, TotalEnergies Clientes SAU, a subsidiary of the global energy corporation TotalEnergies, fell victim to a targeted cyberattack. The incident involved unauthorized access to one of its sales management computer systems, resulting in the exposure of sensitive personal data belonging to 210,715 customers. The compromised information included confidential details, though the exact nature of the data (e.g., financial records, identification documents) was not publicly specified.The company responded by collaborating with law enforcement agencies and the Spanish Data Protection Agency (AEPD) to investigate the breach, mitigate risks, and pursue legal action against the perpetrators. While no ransomware was reported, the attack raised concerns over customer privacy violations and potential downstream risks such as identity theft or fraud. TotalEnergies emphasized efforts to strengthen cybersecurity measures and notify affected individuals, though the long-term reputational and operational impacts remain under assessment.

Source: https://www.lne.es/asturias/2024/07/03/total-energies-sufre-ciberataque-datos-104881663.html

TPRM report: https://www.rankiteo.com/company/totalenergies

"id": "tot316092125",
"linkid": "totalenergies",
"type": "Cyber Attack",
"date": "7/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '210,715',
                        'industry': 'Energy',
                        'location': 'Spain',
                        'name': 'TotalEnergies Clientes SAU',
                        'type': 'Subsidiary'}],
 'data_breach': {'number_of_records_exposed': '210,715',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Sensitive',
                 'type_of_data_compromised': 'Personal data'},
 'description': 'In July 2024, TotalEnergies Clientes SAU, a subsidiary of the '
                'global energy company TotalEnergies, experienced a '
                'cyberattack that compromised the personal data of 210,715 '
                'customers. The breach involved unauthorized access to one of '
                'its sales management computer systems, exposing sensitive '
                'customer information.',
 'impact': {'data_compromised': ['Personal data of 210,715 customers'],
            'systems_affected': ['Sales management computer system']},
 'regulatory_compliance': {'legal_actions': ['Pursuing legal action against '
                                             'responsible parties'],
                           'regulatory_notifications': ['Spanish Data '
                                                        'Protection Agency']},
 'response': {'law_enforcement_notified': True},
 'title': 'TotalEnergies Clientes SAU Data Breach (July 2024)',
 'type': 'Data Breach'}