Un pirate revendique un accès au CRM d’ENI

A previously unknown cybercriminal, appearing on a dark web forum, claims to have gained access to ENI’s French professional space in October 2025 via phishing, exposing customer data, invoices, and sensitive account management functions. The pirate asserts he sold the data in December 2025 and plans to release further databases and discoveries. He provided invoices for professional clients and large accounts, including Crous, foundations, and religious organizations. While the claims are unverified and the timeline is unclear, the leaked invoices represent a potential risk for actors specializing in social engineering and could be used to craft convincing communications targeting clients, suppliers, or accounting services. The incident follows a previous data leak from ENI in 2025.