ENGIE Data Breach
The 2023 ENGIE (Mon Espace Prime) data breach occurred in April 2023 when customer subsidy and energy-efficiency grant records from Mon Espace Prime (monespaceprime.engie.fr), a dedicated portal operated by French multinational energy and utility conglomerate ENGIE (engie.fr), were compromised and published on cybercrime forums.
Exposed Data Types
8- Email addresses
- Names
- Phone numbers
- Physical addresses
- Purchases
- Geographic locations
- Genders
- Website activity
About This Breach
What information was affected in the ENGIE incident?
The leaked dataset (final_engie.csv) contains rich demographic, fiscal, and property dossiers for French residents applying for national energy efficiency subsidies (CEE). Compromised records for 109,255 unique customers encompass:
- Personal & Identity Information: Salutation (M., Mme), full first and last names.
- Contact Credentials: Canonical email addresses, mobile phone numbers, and landline telephone numbers.
- Physical Location & Residential Data: Street addresses, postal codes (CP), municipalities (Ville), and departmental codes.
- Official Property & Cadastral Records: Land registry cadastral parcel numbers (Numéro de parcelle cadastrale) and ENGIE customer account IDs.
- Household Energy Attributes: Housing typology (detached home/apartment), heating system specifications, heated square meterage, and awarded subsidy sums (Prime attribuée).
How many accounts were affected?
Rigorous RFC canonical parsing and deduplication across 157,466 applications confirmed 109,255 unique valid email addresses.
Technical analysis and security risks
The structured leak originates from a French government-accredited energy renovation grant pipeline. Direct correlation of cadastral parcel identifiers with homeowners' full names, verified phone numbers, and heating systems creates high vulnerability to deceptive green renovation scams, fraudulent heating maintenance solicitations, and sophisticated spear-phishing.
Recommended actions for affected users
ENGIE customers who registered on Mon Espace Prime should:
- Be alert to unsolicited phone calls or SMS messages offering home insulation checks or claiming pending subsidy clearances.
- Verify any account communication directly via the official ENGIE customer portal.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
