Eau Cœur d'Essonne
ModerateReportedEnergy
A threat actor claims to have put up for sale, on 8 October 2026, a 12.1 MB file concerning about 55,000 customers of Eau Cœur d'Essonne, a public water utility in the Essonne département of France. According to FrenchBreaches, the published sample contains names of occupants and account holders, postal addresses, meter and connection numbers, contract references, payment methods, arrival and departure dates, and subscriber categories. No IBAN or card number appears in the sample. The origin of the data, the authenticity of the full file and the exact number of distinct customers remain unconfirmed, and no statement from the organisation was found.
The combination of a name, address, meter number and genuine contract reference would let a third party craft credible phishing or fraudulent solicitation messages posing as the water service.
- Disclosed on
- October 8, 2026
- Accounts affected
- 55,000
- Sector
- Energy
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Postal address
- Customer ID
- Order history
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact