CenterPoint Energy said hackers stole personal information from some customers after breaking into one of the utility’s internet-facing systems. The company disclosed the incident in an SEC filing after a dark web post offered allegedly stolen data. CenterPoint said electric and gas service was not disrupted, but the exposed data may include names, account information, billing details, and the last four digits of Social Security numbers; the company is still determining scope.
Why it matters: Utility customers may face identity theft, phishing, or account-targeted fraud, and critical-infrastructure operators are again showing exposure through public-facing systems even when service stays online. Affected customers should watch for official breach notices, monitor accounts, and be wary of scam calls or emails referencing utility bills or account details.
Bill Toulas
2026.09.15
96% relevant
This source materially advances the same incident by reporting CenterPoint's SEC filing confirming that customer personal information was stolen, adding details about the alleged scope (7.49 million records), the attacker’s claim that a public API was abused by iterating IDs, and that lawsuits have already been filed.
Eduard Kovacs
2026.09.15
99% relevant
This source is a direct follow-up confirming the breach via an SEC filing, adding that the unauthorized access came through an external-facing system, that service delivery was not impacted, and that a hacker leaked a 2.5 GB archive while claiming to have stolen nearly 7.5 million customer records.
2026.09.15
100% relevant
This article appears to be the first clear disclosure of this specific CenterPoint Energy breach, including SEC-confirmed unauthorized access and customer data theft tied to a dark web claim.
← Back to all stories