07-31-2026, 04:47 PM
Breach date: July 31, 2026, at 9:49 AM EDT
EndesaX (Endesa S.A.) is the electrification and smart-services arm of Spain's largest electricity utility, majority-owned by Italy's Enel Group. This dataset spans July 17 to July 31, 2026 (~2 weeks).
7,483 Unique Events | 6,415 Unique Customer Profiles | 8,019 Unique NIF/NIE IDs | 6,399 Unique Emails | 7,136 Unique Phones | 6,241 Unique IBANs | 7,913 Unique CUPS/POS Supply Points | 16,285 Unique Contract References | ~7,568 Unique Names | 4,771 Streets | 2,063 ZIP Codes | 1,870 Cities | 50 Provinces
I recently gained backend access to EndesaX. I know it already suffered a data breach in January 2026, but these are fresh accounts spanning from July 17 to July 31, 2026, and I still have backend access. I managed to scrape over 6,000 user accounts within 20 minutes. I managed to gain access to an employee account through a method I won't disclose.
I'd gladly leak the credentials. I don't like spending a long time on a breach and wasting my time, even though this could potentially involve millions of users.
Per profile:
Compressed: 2.9 MB
Uncompressed: 33.96 MB
Format: JSONLines
Free Download: https://anonfilesnew.com/s/-T2u83eO9NP
![[Image: Endesa-Logo.png]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Flogos-world.net%2Fwp-content%2Fuploads%2F2020%2F12%2FEndesa-Logo.png)
EndesaX (Endesa S.A.) is the electrification and smart-services arm of Spain's largest electricity utility, majority-owned by Italy's Enel Group. This dataset spans July 17 to July 31, 2026 (~2 weeks).
7,483 Unique Events | 6,415 Unique Customer Profiles | 8,019 Unique NIF/NIE IDs | 6,399 Unique Emails | 7,136 Unique Phones | 6,241 Unique IBANs | 7,913 Unique CUPS/POS Supply Points | 16,285 Unique Contract References | ~7,568 Unique Names | 4,771 Streets | 2,063 ZIP Codes | 1,870 Cities | 50 Provinces
I recently gained backend access to EndesaX. I know it already suffered a data breach in January 2026, but these are fresh accounts spanning from July 17 to July 31, 2026, and I still have backend access. I managed to scrape over 6,000 user accounts within 20 minutes. I managed to gain access to an employee account through a method I won't disclose.
I'd gladly leak the credentials. I don't like spending a long time on a breach and wasting my time, even though this could potentially involve millions of users.
Per profile:
- First Name
- Last Name
- Email Address
- Primary Phone Number
- Secondary Phone Number
- Phone Prefix
- Country
- Preferred Language
- Account Type
- Account Status
- Customer / Account Unique ID
- Identity Document Type
- Identity Document Number
- Full Address
- Street Name
- Street Number
- Floor
- Door / Apartment
- Postal / ZIP Code
- City
- Province
- Municipality
- Municipal Code
- Street Code
- Address Validation Status
- Installation Address
- Billing Address
- Shipping Address
- Point of Service (POS) Identifier
- CUPS / Energy Service Point Identifier
- IBAN / Bank Account Number
- Commodity Contract Number
- Contract ID
- Billing Profile ID
- Invoice Delivery Preference
- Invoice Preferred Language
- Payment Method
- Contracted Power
- Energy Tariff
- Market Segment
- Order Type
- Order Status
- Contract Activation Date
- Cancellation Reason
- GDPR Consent Information
- Transaction Timestamp
- Internal Account / CRM IDs
- Internal Order / Integration IDsCompressed: 2.9 MB
Uncompressed: 33.96 MB
Format: JSONLines
Free Download: https://anonfilesnew.com/s/-T2u83eO9NP