BreachPublished 15 Sep 2026

Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data

Source SecurityWeek

Description

CenterPoint Energy, a Texas-based utility company serving approximately 7 million customers, confirmed a data breach after a hacker claimed to have stolen 7.5 million customer records. The breach involved unauthorized access to an external-facing system, and the company is investigating the incident. The breach has not affected the delivery of electric and gas services, and the company does not expect a material impact from the data exposure. The hacker leaked a 2.5 GB archive allegedly containing the stolen data and threatened further attacks on infrastructure. This is not the first time CenterPoint Energy data has been targeted, with previous incidents linked to third-party breaches. The validity of the leaked data has not been independently confirmed.

Impact

The breach exposed personal information of millions of customers, potentially risking privacy and enabling identity-related fraud. However, CenterPoint Energy reports no disruption to utility service delivery and does not expect a material financial or operational impact. The threat actor's warning of future attacks on infrastructure raises concerns about potential escalation, but no such attacks have been confirmed. The breach may erode customer trust and could lead to regulatory scrutiny or legal consequences depending on investigation outcomes.

Defensive guidance

CenterPoint Energy has initiated an investigation and disclosed the breach publicly. Organizations should monitor official communications from CenterPoint Energy for updates and follow any recommended actions. Customers should remain vigilant for phishing or fraud attempts using stolen data. Since the breach involves an external-facing system, reviewing and strengthening access controls, monitoring for suspicious activity, and applying security best practices for internet-facing assets are prudent steps.

Summary

A threat actor gained unauthorized access to one of CenterPoint Energy's external-facing systems, obtaining personal information related to a portion of its customers. The hacker claims to have stolen approximately 7.5 million customer records and has leaked a large archive of data on a cybercrime forum. CenterPoint Energy has acknowledged the breach in an SEC filing and is conducting an ongoing investigation. The company states that the breach has not disrupted utility services and does not anticipate a material impact. Historical context indicates previous claims of stolen data from CenterPoint Energy were linked to third-party breaches rather than direct compromise. The hacker has issued a threat to escalate attacks against the company’s infrastructure.

References

securityweek.com/texas-utility-centerpoint-energy-confirms-breach-after-hacker-leaks-data/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 15 Sep 2026, 15:31 UTC

References

Community reviews