Total Energies

In July 2024, **TotalEnergies Clientes SAU**, a subsidiary of the global energy corporation **TotalEnergies**, fell victim to a targeted cyberattack. The incident involved unauthorized access to one of its **sales management computer systems**, resulting in the exposure of **sensitive personal data** belonging to **210,715 customers**. The compromised information included confidential details, though the exact nature of the data (e.g., financial records, identification documents) was not publicly specified.The company responded by **collaborating with law enforcement agencies** and the **Spanish Data Protection Agency (AEPD)** to investigate the breach, mitigate risks, and pursue legal action against the perpetrators. While no ransomware was reported, the attack raised concerns over **customer privacy violations** and potential downstream risks such as identity theft or fraud. TotalEnergies emphasized efforts to **strengthen cybersecurity measures** and notify affected individuals, though the long-term reputational and operational impacts remain under assessment.

Source: https://www.lne.es/asturias/2024/07/03/total-energies-sufre-ciberataque-datos-104881663.html

TPRM report: https://www.rankiteo.com/company/totalenergies

"id": "tot316092125",
"linkid": "totalenergies",
"type": "Cyber Attack",
"date": "7/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '210,715',
                        'industry': 'Energy',
                        'location': 'Spain',
                        'name': 'TotalEnergies Clientes SAU',
                        'type': 'Subsidiary'}],
 'data_breach': {'number_of_records_exposed': '210,715',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Sensitive',
                 'type_of_data_compromised': 'Personal data'},
 'description': 'In July 2024, TotalEnergies Clientes SAU, a subsidiary of the '
                'global energy company TotalEnergies, experienced a '
                'cyberattack that compromised the personal data of 210,715 '
                'customers. The breach involved unauthorized access to one of '
                'its sales management computer systems, exposing sensitive '
                'customer information.',
 'impact': {'data_compromised': ['Personal data of 210,715 customers'],
            'systems_affected': ['Sales management computer system']},
 'regulatory_compliance': {'legal_actions': ['Pursuing legal action against '
                                             'responsible parties'],
                           'regulatory_notifications': ['Spanish Data '
                                                        'Protection Agency']},
 'response': {'law_enforcement_notified': True},
 'title': 'TotalEnergies Clientes SAU Data Breach (July 2024)',
 'type': 'Data Breach'}