Cyberattack on Hamburg Energy Contractor May Have Exposed Customer Data

Summary

A cyberattack on contractor Enseco may have exposed Hamburger Energienetze customer names, addresses, meter and appointment details, and contact information. The utility says its own systems were unaffected.

Key points

• Hamburger Energienetze told affected customers that attackers accessed data held by contractor Enseco and, according to current findings, downloaded it.
• Potentially affected data includes names, addresses, contact details, electricity meter numbers and photos, and appointment information; sensitive data and bank details were reportedly not affected.
• Enseco shut down its systems after the attack, brought in external specialists, and later restored the systems under ongoing monitoring.
• The relevant data-protection authority was informed. Hamburger Energienetze says it reviewed the incident and its own systems were not affected.
• The utility says misuse cannot be ruled out and advises customers to be alert to unexpected messages or calls, avoid opening unsolicited links or attachments, and use known official contact channels.
• Another Enseco customer, EWR AG, says it disconnected all technical connections to Enseco as a precaution and that its systems and customer data were not affected.