Threat actor claims to have breached the database of EndesaX (Endesa S.A.). The compromised data reportedly includes 6,415 unique customer profiles collected between July 17 and July 31, 2026. The exposed dataset contains first names, last names, email addresses, primary and secondary phone numbers, phone prefixes, NIF/NIE identification numbers, IBANs, CUPS/POS supply point identifiers, contract reference numbers, names, street addresses, ZIP codes, cities, provinces, and other customer profile information.