Plenitude On The Road told customers it detected unauthorized access to its customer database between October 19 and 20, 2026, with some personal data exfiltrated [1]. Data include names, tax reference numbers, home addresses, emails, phone numbers and charging records, plus company name and VAT number for business users, but no login or payment data; according to SmartWorld, customers were notified on October 23 [1][2]. The company advises paying particular attention to suspicious messages asking for personal or financial details or containing unexpected links or attachments, and says it will never ask for passwords or payment details [1].
Eni's EV charging service Plenitude On The Road breached; customer tax IDs and charging records stolen
1 min read
- Disclosed
- Oct 23, 2026
- Occurred
- Oct 19, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Energy
What to do nowOur advice
- Pay particular attention to suspicious messages asking for personal or financial details or with unexpected links or attachments [1].
- The company never asks for passwords or payment details; verify senders if in doubt .
Timeline
Technical details
Remediation
Vendor guidance
- 1Beware of phishing verify[1]
Beware of suspicious messages asking for personal or financial data.
References
Official / primary1
- [1]Plenitude On The Road2026-10-23Accessed 2026-11-11Snapshot 2026-11-11 sha256 8bfade7a0fd2
“Between 19 and 20 October 2026, we detected unauthorised access to our customer database.”
Media1
- [2]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.