Eni Energy Breach

On March 1, 2026, the Italian energy conglomerate Eni S.p.A. was reportedly targeted in a data breach attributed to the extortion group Lapsus$. Initial threat intelligence reports indicate that the group gained unauthorized access to internal systems, potentially impacting approximately 50,000 clients and exfiltrating sensitive operational documents. This incident follows a pattern of high-profile attacks by Lapsus$, which re-emerged in 2025 as part of a broader collective including Scattered Spider and ShinyHunters. Unlike traditional ransomware actors, the group focused on data exfiltration and public extortion via Telegram rather than system-wide encryption.