NewsPublished 15 Sep 2026

CenterPoint Energy confirms customer data stolen in cyberattack

Source Bleeping Computer

Description

CenterPoint Energy disclosed a breach compromising some customers' personal information after an attacker leaked data allegedly stolen from the utility company. [...]

Impact

The breach exposed sensitive personal information of millions of customers, including partial Social Security numbers and billing details, which could increase the risk of identity theft and fraud for affected individuals. Although the company states that electric and gas services were not impacted and does not anticipate material business disruption, the exposure of personal data may lead to reputational damage, regulatory scrutiny, and legal consequences, as evidenced by ongoing class action lawsuits.

Defensive guidance

CenterPoint Energy has activated its incident response procedures, engaged third-party cybersecurity experts, strengthened protections on its external systems, and reported the incident to law enforcement and regulatory authorities. Customers should be notified as required by law. Organizations should ensure public APIs have appropriate security controls such as rate limiting and web application firewalls to prevent automated data harvesting. Since the vendor is managing remediation and investigation, no additional immediate action is recommended beyond monitoring official communications for updates.

References

bleepingcomputer.com/news/security/centerpoint-energy-confirms-customer-data-stolen-in-cyberattack/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 15 Sep 2026, 16:46 UTC

References

Community reviews