Plan
active
ENGIE discloses customer data breach via third-party marketing platform
- Engineer — Learn: No exploitable software or patch involved; the breach vector was a third-party marketing platform, reinforcing the risk of partner-held data access — no direct action on running systems.
- SOC/IR — Skip
- Leader — Plan: Review which marketing or data platforms used by business partners hold customer PII; ENGIE’s breach illustrates how indirect third-party access creates direct exposure — add to vendor risk audit backlog this quarter.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.