Enessance: ransomware attack
On 21 October 2025, ransomware encrypted data on some servers and devices of the Enessance group, an LP gas retailer, and its systems went down. On 30 November it found data apparently stolen from it published on the attackers' leak site. The fourth report on 11 May 2026 said names, addresses, phone numbers, emails and more of about 365,000 customers, plus about 2,000 employee records, leaked or may have leaked. The entry point was not identified, but was most likely its internet connection. Toell, which used the group for gas delivery, disclosed about 310 of its own customers.
Disclosed
2025-10-23
Organizations involved
2
Leaked or at risk
365K
365,000
Downtime
Unknown
Timeline
- Detected 2025-10-21
- Disclosed 2025-10-23
- 2 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak][Service outage][Extortion]
- Entry point
- Unknown
Data exposed or at risk
Supply chain
[Breached]
[Breached]
- Organizations listed on this site
- 2
Organizations involved
[Breached][Critical]Tokyo, MinatoElectricity, gas, heat and water365,000 leaked
Enessance Holdings Inc.[Through a supplier][Major]Kanagawa, Yokohama, KohokuElectricity, gas, heat and water310 leaked
Toell Co., Ltd.
Sources
- [1][Official]システム障害に関するお知らせ(第4報)Enessance Holdings · 2026-05-11
- [2][Official]当社の業務委託先におけるお客さま情報漏えいの可能性Toell