---
title: Notification of a personal data breach pursuant to Article 34 of EU Regulation 679/2016
---

| View in browser Dear Customer, We are writing to inform you that, following a number of checks, we have detected a cyber security incident affecting our systems caused by unidentified external parties. This incident resulted in unauthorised access to, and the subsequent exfiltration of, certain personal data belonging to our customers.  Our customers’ privacy is very important to us, and we assure you that we have taken all necessary steps to manage the situation, which has been promptly resolved.     What happened? Between 19 and 20 October 2026, we detected unauthorised access to our customer database.   Plenitude On The Road immediately launched in-depth technical and security analyses to block the attack.    What data is affected?  The information that was subject to unauthorised access falls within the following categories of personal data: Users’ personal and identification details (first name, surname, tax reference number, residential address);  Users’ contact details (email address, telephone number);   Users’ charging data (information associated with the charging service, such as, for example, kWh charged, date and time of charging, cost of charging); Employer (company name), in cases where the user had created an account linked to the billing profile of a Plenitude On The Road business customer;  Company name and VAT number for users with a business profile. No account login details, personal credentials or payment method information (such as credit card number, expiry date or security code) were involved.   What action have we taken? Plenitude On The Road took immediate action to:  Block and delete the access credentials used by the attacker as quickly as possible, in order to prevent them from continuing the attack.  Intelligence operations have been launched to investigate any circulation, including on the dark web, of news about the attack or the exfiltrated data. So far, these checks have proved negative.  We have stepped up monitoring of our systems. We have also notified CSIRT Italia (the Computer Security Incident Response Team of the National Cybersecurity Agency) and the Italian Data Protection Authority of the incident, in accordance with current legislation, and we are filing a complaint with the Public Prosecutor’s Office at the Court of Milan.     What are the consequences for our users? You can continue to use the service provided via the Plenitude On The Road app, as the attack did not cause any disruption to the top-up service;   There is no need to change your profile login details;   We are carrying out checks to see whether any discount codes already provided to users but not yet used have been misappropriated; if necessary, we will resend these to the users concerned;  Given the nature of the data involved, there may be a risk of receiving fraudulent communications or deceptive attempts to contact you. We therefore advise you to pay particular attention to any suspicious messages, especially if they ask for personal or financial details or contain unexpected links or attachments. If in doubt, always check the sender’s credibility. Please also bear in mind that Plenitude On The Road will never contact you to ask for your password or payment details. Following the implementation of these measures, there have been no further instances of unauthorised access to the Plenitude On The Road database.    We apologise for what has happened and wish to reassure you that protecting our customers’ personal data is a priority for us, and we continue to work to ensure the highest level of security for our systems.    For further information, please contact our Customer Care team, or you can email us at any time at privacy@service.emob.eniplenitude.com and dpo@eniplenitude.com   Kind regards, Plenitude On The Road Plenitude On The Road S.r.l. is a company subject to the management and coordination of ENI. Copyright © 2026 Plenitude On The Road S.r.l. VAT no. & Tax Code: IT09957510960 Need Help ? Click HERE. Manage preferences You have received this service communication based on the existing contractual relationship with Plenitude On The Road S.r.l., acting as data controller. The Privacy Policy is always available in the privacy section of Plenitude’s website. |
| --- |