Digital Charging Solutions (DCS), a German provider of public EV charging infrastructure, reported a data breach caused by unusual behavior from a third-party support provider authorized to access customer data. The incident involved the unnecessary viewing of names and email addresses of fewer than ten customers, with no financial or sensitive data compromised. DCS confirmed that no malicious third party or insider threat was involved, though the breach was deemed irregular enough to warrant notification to affected customers, law enforcement, and data protection authorities.The company, which serves over a million customers across Europe and partners with major automakers like BMW and Kia, has implemented additional security measures and is collaborating with the service provider’s management to clarify the incident. While the breach was limited in scope, it highlights risks associated with third-party access to customer data, even in non-malicious scenarios. DCS emphasized that no payment data was exposed, as it does not store or process such information. Authorities were promptly informed, and impacted individuals were notified separately.