Luminus

Luminus is Belgium's second largest electricity producer and energy supplier, and the country's number one onshore wind operator. The estate it runs is not abstract: more than 314 wind turbines on Belgian soil, 847.2 MW of installed wind capacity, and 7 hydroelectric plants generating roughly enough electricity for 60,000 households. Twenty-three percent of total capacity comes from renewable sources. That mix puts generation assets, grid-facing control systems, and a customer-facing retail stack under one operator - the kind of environment where IT and operational technology stop being separate problems.

On the retail and distributed side, the surface widens further. Luminus sells electricity and gas to residential and business customers, installs solar panels, home battery storage, heat pumps, and EV charging solutions, and runs flexibility and energy storage services. My Luminus, its customer portal, handles consumption data, contracts, invoices, and payments - which means identity, billing integrity, and metering data all sit in scope alongside generation. The company's Electrify 2030 strategy commits to a CO₂-neutral energy future and ongoing investment in expanding sustainable production, a direction backed by majority shareholder Électricité de France (EDF). The threat model here is the one utilities actually face: a connected fleet of inverters, chargers, batteries, and customer endpoints layered onto legacy generation infrastructure, all of it critical infrastructure in a European regulatory context.

Work is based in Belgium, across domains spanning renewable generation, energy supply and distribution, flexibility services, storage, and electrification technologies. For security practitioners, the interesting surface is the intersection: SCADA and industrial control on the plant side, cloud and mobile on the customer side, and the data flows between them.