What is the official website of Endesa ?

The official website of Endesa is http://www.endesa.com.

What is Endesa's cybersecurity risk score?

Endesa has an AI-generated cybersecurity risk score of 713 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Endesa experienced?

According to Rankiteo, Endesa currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Endesa been affected by any supply chain cyber incidents ?

According to Rankiteo, Endesa has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Endesa have SOC 2 Type 1 certification ?

According to Rankiteo, Endesa is not certified under SOC 2 Type 1.

Does Endesa have SOC 2 Type 2 certification ?

According to Rankiteo, Endesa does not hold a SOC 2 Type 2 certification.

Does Endesa comply with GDPR ?

According to Rankiteo, Endesa is not listed as GDPR compliant.

Does Endesa have PCI DSS certification ?

According to Rankiteo, Endesa does not currently maintain PCI DSS compliance.

Does Endesa comply with HIPAA ?

According to Rankiteo, Endesa is not compliant with HIPAA regulations.

Does Endesa have ISO 27001 certification ?

According to Rankiteo,Endesa is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Endesa operate in ?

Endesa operates primarily in the Utilities industry.

How many employees does Endesa have ?

Endesa employs approximately 7,444 people worldwide.

Does Endesa own any subsidiaries ?

Endesa presently has no subsidiaries across any sectors.

How many LinkedIn followers does Endesa have ?

Endesa's official LinkedIn profile has approximately 328,462 followers.

What is the NAICS classification code for Endesa ?

Endesa is classified under the NAICS code 22, which corresponds to Utilities.

Does Endesa have a Crunchbase profile ?

Yes, Endesa has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/endesa.

Does Endesa have a LinkedIn profile ?

Yes, Endesa maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/endesa.

How many cybersecurity incidents has Endesa experienced ?

As of August 5, 2026, Rankiteo reports that Endesa has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Endesa have ?

Endesa has an estimated 4,463 peer or competitor companies worldwide.

What types of cybersecurity incidents has Endesa faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Endesa

Boost Score +25 with badge (5 left)

713

/1000

Moderate

738

/1000

Moderate

Endesa Vendor Cyber Rating & Cyber Score

endesa.com

cb in

Add Your Compliance Badge

We are leaders in the Spanish electric power industry and the second operator in the Portuguese electric market. With more than 10 thousand employees, we provide our services to 12.6 million clients and our core business is the production, transportation, distribution and commercialization of electric power. We also operate in the natural gas sector and we develop other energy-related services. We are a company that looks ahead to the future: we bet on a more sustainable energetic culture and we are committed with our responsibility of actively contributing to the construction of an intelligent energetic future through innovation. From the third trimester of 2009, we are part of the Enel group, the biggest electric power company in Italy

Endesa A.I CyberSecurity Scoring

Scoring History

Endesa

Endesa CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Endesa

Breach

1/2026

END1768237930

Endesa

Breach

100

1/2026

ENDNAT177773216...

Loading…

A.I.

Endesa Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Endesa

Incidents vs Utilities Industry Avg (This Year)

Endesa has 16.96% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Endesa has 94.17% more incidents than the average of all companies with at least one recorded incident.

Incident Types Endesa vs Utilities Industry Avg (This Year)

Endesa reported 2 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 2 data breaches, compared to industry peers with at least 1 incident.

Incident History - Endesa (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Endesa Subsidiaries

Endesa

Utilities

Website: http://www.endesa.com

Company Size: 10,001+ employees

Enel GroupUtilities

Enel Green PowerRenewable Energy Semiconductor Manufacturing

Enel BrasilUtilities

Enel Comercializadora e TradingServices for Renewable Energy

Enel ChileUtilities

EdesurUtilities

Enel EnergiaUtilities

LeneUtilities

Enel Open Innovability®Servizi pubblici

GridspertiseAppliances, Electrical, and Electronics Manufacturing

Enel ArgentinaUtilities

Enel X WayConsumer Services

Enel XUtilities

EnerNOCIT Services and IT Consulting

EnTech USB LtdFinancial Services

Activation Energy is now EnerNOC!Oil and Gas

Enel North AmericaRenewables & Environment

Chilectra hoy es Enel Distribución ChileOil and Gas

Enersis Chile hoy Enel ChileUtilities

Enel ColombiaUtilities

CoelceAppliances, Electrical, and Electronics Manufacturing

Endesa PortugalUtilities

Loading…

Endesa Similar Companies

Saudi Electricity Company

se.com.sa

The Saudi Electricity Company was established on the 5th of April in the year 2000, incorporated in accordance with Council of Ministers Mandate No. 169 dated November 30th, 1998, the Saudi Electricity Company was born out of the merger of smaller regional power company in the central, eastern, western and southern regions, as well as 10 small companies in the north of the Kingdom run by what was formerly known as the General Electricity Company. Vision To provide world-class energy services to our nation and our customers. Mission To empower the nation power the world.

K-Electric

cb ke.com.pk

KE (formerly Karachi Electric Supply Company) is the only vertically integrated power utility in Pakistan that generates, transmits and distributes electricity to industrial, commercial, agricultural and residential consumers of Karachi (and its outskirts), a metropolis of 20 million people - Pakistan’s largest city. K-Electric (KE) is a public listed company incorporated in Pakistan in 1913 as KESC. Privatized in 2005 KE is the only vertically integrated utility in Pakistan supplying electricity within a 6500 km square territory including Karachi and its adjoining areas. The majority shares (66.4%) of the company are listed in the PSX owned by KES Power, a consortium of investors including Aljomaih Power Limited of Saudi Arabia, National Industries Group (Holding), Kuwait, and the Infrastructure and Growth Capital Fund (IGCF). The Government of Pakistan is also a minority shareholder (24.36%) in the company. KE is one of the county’s largest employers: with a workforce of around 11,000 employees. It is one of the only 12 companies in Pakistan’s industrial sector that have been included in the esteemed list of ‘Approved, Training Employer' by the ICAEW and is also the recipient of the Platinum Employer Status by the ACCA. KE secured a level ‘A’ rating from the Global Reporting Initiative (GRI) for its Integrated Sustainability Report for the year 2012. This makes K-Electric the first power utility in Pakistan to achieve the level ‘A’ rating for an integrated report. Visit our official Facebook and Twitter handles for 24/7 support.

Constellation

constellationenergy.com

Constellation Energy Corporation (Nasdaq: CEG), a Fortune 200 company headquartered in Baltimore, is the nation’s largest producer of reliable, emissions-free energy and a leading energy supplier to businesses, homes and public sector customers nationwide, including three-fourths of Fortune 100 companies. With annual output that is nearly 90% carbon-free, our hydro, wind and solar facilities paired with the nation’s largest nuclear fleet have the generating capacity to power the equivalent of 16 million homes, providing about 10% of the nation’s clean energy. We are committed to investing in innovative technologies to drive the transition to a reliable, sustainable and secure energy future. https://www.constellationenergy.com/our-company/what-we-stand-for/our-purpose.htm Learn more at www.constellationenergy.com or on Twitter at @ConstellationEG. Subscribe to our blog at www.constellation.com/subscribe

Xcel Energy

cb xcelenergy.com

A leading energy provider, dedicated to excellence. We make energy work better for our customers, helping them thrive every day. That means always raising the bar - delivering better service and providing more reliable, resilient and sustainable energy to the eight states we serve: Minnesota, Colorado, Wisconsin, Michigan, North Dakota, South Dakota, New Mexico and Texas. At Xcel Energy, we provide work that makes a difference, a team you can count on, opportunities to grow and rewards that help you thrive. Ready to help power the future of energy? Visit jobs.xcelenergy.com to learn more.

Hitachi Energy

cb hitachienergy.com

Hitachi Energy is a global technology leader in electrification, powering a sustainable energy future with innovative power grid technologies with digital at the core. Over three billion people depend on our technologies to power their daily lives. With over a century in pioneering mission-critical technologies like high-voltage, transformers, automation, and power electronics, we are addressing the most urgent energy challenge of our time – balancing soaring electricity demand, while decarbonizing the power system. With an unparalleled installed base in over 140 countries, we co-create and build long-term partnerships across the utility, industry, transportation, data centers, and infrastructure sectors. Headquartered in Switzerland, we employ over 50,000 people in 60 countries and generate revenues of around $16 billion USD.

Enedis

enedis.fr

Enedis est le gestionnaire du réseau public de distribution d’électricité sur 95 % du territoire français continental. Ses 38 859 collaborateurs assurent chaque jour l’exploitation, l’entretien et le développement de près de 1,3 million de kilomètres de réseau. Raccordement, mise en service, dépannage, changement de fournisseur... Autant d’opérations assurées quotidiennement par Enedis. En tant que gestionnaire du réseau public de distribution d’électricité, Enedis réalise chaque année de nombreuses interventions : plus de 11 millions en 2014. La nature des prestations diffère selon les clients : clients finaux, fournisseurs ou producteurs d’électricité.

Southern California Edison (SCE)

cb sce.com

As one of the nation’s largest electric utilities, we’re bringing more clean and renewable sources of energy to Southern California. From energy storage to transportation electrification, our employees are working on innovative projects that will help cut emissions and greenhouse gases to provide cleaner air for everyone. We have diverse teams, made up of inventors, doers and problem solvers. The people here at SCE don't just keep the lights on. The mission is so much bigger. We are fueling the kind of innovation that is changing an entire industry, and quite possibly the planet. Follow us on LinkedIn and visit www.edisoncareers.com to learn more about who we are and how we’re working together to create a better tomorrow.

NextEra Energy, Inc.

nexteraenergy.com

NextEra Energy, Inc. (NYSE: NEE) is one of the largest electric power and energy infrastructure companies in North America and is a leading provider of electricity to American homes and businesses. Headquartered in Juno Beach, Florida, NextEra Energy is a Fortune 200 company that owns Florida Power & Light Company, America’s largest electric utility, which provides reliable electricity to approximately 12 million people across Florida. NextEra Energy also owns one of the largest energy infrastructure development companies in the U.S., NextEra Energy Resources, LLC. NextEra Energy and its affiliated entities are meeting America’s growing energy needs with a diverse mix of energy sources, including natural gas, nuclear, renewable energy and battery storage. For more information about NextEra Energy companies, visit these websites: www.NextEraEnergy.com, www.FPL.com, www.NextEraEnergyResources.com.

E.ON

eon.com

We are one of Europe's largest energy companies with the business areas of energy networks, energy infrastructure solutions and energy sales. It’s on us to make new energy work, and we are actively leading energy’s future – putting our customers first and delivering innovative solutions that help advance the energy transition. With our 1.6 million kilometre-long energy distribution grid and around 47 million customers, we are playing a leading role in shaping a green, digital, and decentralised energy world and are investing massively to meet the rapidly growing demand for energy infrastructure. https://www.eon.com/en/privacy.html

Loading…

NEWS

Endesa CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 15, 2026 08:00 AM

News - Endesa Reports Cyber Security Incident Affecting Sensitive Customer Information

Endesa has announced a data security breach after malicious actors gained unauthorised access to its internal network, leading to the theft...

Read Article

January 13, 2026 08:00 AM

Cybersecurity News: Instagram denies breach, Sweden detains spying suspect, n8n attack steals OAuth tokens

Instagram has weighed in on what it says is a bug, not a breach, that let attackers mass-trigger password reset emails after cybercriminals...

Read Article

January 13, 2026 08:00 AM

Spanish energy giant Endesa says it was hit by data breach

Endesa Energia, the retail arm of one of Europe's biggest energy providers, Endesa, S.A., has confirmed it recently suffered a cyberattack...

Read Article

January 12, 2026 08:00 AM

A cyberattack extracts personal data from Endesa customers.

The energy company acknowledges a hack of its platform, but says that user passwords were not compromised.

Read Article

January 12, 2026 08:00 AM

Spanish electricity company Endesa reports customer data theft, including bank details

Spain's leading electricity supply company Endesa has issued a warning following a "security incident" that has compromised a cache of...

Read Article

January 12, 2026 08:00 AM

Endesa electric company hacked: Canary Islands customers warned after major data breach

Early investigations suggest the hacker may have downloaded names, addresses, contact numbers, ID documents, and IBAN numbers…

Read Article

January 05, 2026 08:00 AM

Alleged cyberattack targets Spain's Endesa, exposing data of millions

A cybercriminal threat actor known as "spain" has claimed responsibility for a major data breach involving Endesa, one of Spain's largest...

Read Article

December 04, 2025 08:00 AM

Phishing: what it is, how to spot it, and what to do if you are targeted by an impersonation attempt

How to protect yourself from phishing campaigns that make fraudulent use of Endesa's name to trick and confuse you with your electricity and...

Read Article

September 11, 2025 07:00 AM

News - Georgia’s Wayne Memorial Hospital Reports Data Breach Affecting Over 160,000 People

Wayne Memorial Hospital, a healthcare provider based in Georgia, reported that a data security breach last year exposed the sensitive...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-45537

SUMMARY

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the construct_uri() function concatenates multiple URI components (protocol, username, domain, port, params) into a fixed 1024-byte global BSS buffer without any bounds checking. When a routing script calls construct_uri() with an attacker-controlled username, a combined component length exceeding 1024 bytes overflows the buffer, corrupting adjacent global data with attacker-controlled content. The overflow reaches disable_503_translation, a global flag controlling SIP 503 response handling, allowing an attacker to deterministically set the flag via the URI username and alter the server's routing behavior for subsequent messages. Because the same buffer is shared with contact_builder(), the overflow also corrupts that function's data, and without a memory sanitizer the adjacent globals are silently overwritten on every request containing a long username. This issue has been fixed in versions 3.6.6 and 4.0.0-rc1.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-18819

SUMMARY

A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project maintainer confirms: "[I]t seems plausible, in that RackTables does not at this time have any CSRF prevention. You may assign a CVE ID to this, but there is no guarantee it will be handled in urgent, or even timely, manner, or at all."

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:N/I:P/A:N

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-18818

SUMMARY

A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-70620

SUMMARY

Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to direct the server to probe internal network resources by supplying arbitrary URLs to the embedding endpoint configuration without scheme, host, IP range, or DNS rebind validation. Attackers can submit loopback addresses, RFC 1918 ranges, or link-local addresses through the embedding endpoint API to partially read responses from cloud instance metadata services, internal APIs, and other hosts reachable from the server.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 6.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.3

REFERENCES

CVE-2026-70619

SUMMARY

Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by invoking endpoint management routes that verify session authentication but omit the admin authorization guard. Attackers can supply an attacker-controlled URL to overwrite the embedding backend persisted in the endpoint configuration file and process environment, causing all subsequent embedding operations including chat messages, RAG queries, memory entries, and vault text to be transmitted in plaintext to the attacker-controlled destination, or delete the endpoint configuration to deny embedding service to all users.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…