CenterPoint Energy Data Breach Impacts Over 1 Million Texans
Houston-based public utility CenterPoint Energy has notified the Texas Attorney General’s Office that more than 1 million state residents were affected by a data breach.
Radwan AbdulhadiEditor and technology writer
Data Breach Notification Filed with Texas Officials
CenterPoint Energy has officially reported to the Texas Attorney General’s Office that 1,062,060 state residents were affected by a recent data breach. This notification comes approximately one month after the Houston-based public utility informed the U.S. Securities and Exchange Commission (SEC) that customer information had been stolen from its systems. Further details are available from SecurityWeek in the original source material.
According to the company’s regulatory filing, the exposed information includes sensitive personal details such as names, physical addresses, Social Security numbers, and driver’s license numbers. Despite the scope of the exposure, the utility has not yet sent formal notification letters to the individual residents whose data was compromised.
Discovery of the Incident and Threat Actor Activity
The security incident came to light after a threat actor boasted on a known cybercrime forum, claiming to have obtained nearly 7.5 million user records from CenterPoint Energy. In its initial SEC filing, the utility confirmed that it only became aware of the data breach following the hacker's public post on the forum.
Following the initial claims, the hacker published a 2.5-gigabyte archive for download on September 12. This file reportedly contains approximately 3 million phone numbers alongside other exfiltrated personal information. CenterPoint Energy stated in its disclosures that while a portion of its customer base was affected, the security incident did not disrupt its day-to-day operations.
Potential Multi-State Impact and Broader Scope
Beyond its large customer base in Texas, CenterPoint Energy also provides electricity and natural gas services to consumers in Indiana, Minnesota, and Ohio. Consequently, residents living in those states may also be affected by the security event. However, the exact total impact and the full extent of compromised data outside of Texas remain unclear as investigations continue.
As organizations across various sectors continue to face cybersecurity challenges, utility providers have increasingly become targets for malicious actors seeking to exfiltrate sensitive customer databases and internal records. Recent industry reports highlight similar extensive incidents affecting major infrastructure and healthcare entities, emphasizing the persistent risks posed to critical data repositories.
Ongoing Investigation and Company Response
As the situation develops, inquiries have been directed to CenterPoint Energy to determine the exact total number of individuals impacted across all operating regions. Additional clarity is expected as the utility continues its internal reviews and coordinates with relevant regulatory authorities regarding the leaked data archive.
Sources
- SecurityWeekCenterPoint Energy Data Breach Impacts 1 Million Texans
Continue chronologically
Related entity coverage
Related stories
Quest Diagnostics Discloses Cyber Breach Affecting Patient Records
American clinical laboratory company Quest Diagnostics reports a cyber breach exposing patient records after unauthorized access to its Quanum LSM system.
Quest Diagnostics Confirms Patient Records Exposed in Cyber Breach
American clinical laboratory giant Quest Diagnostics discloses a data breach affecting its Quanum LSM system, prompting a temporary system pause.
Anthropic Files S-1 Prospectus for Nasdaq IPO
Anthropic has filed its S-1 prospectus with the SEC to list on Nasdaq under the ticker ANT, detailing financials, risks, and compute deals.
Anthropic Files Form S-1 for Initial Public Offering
Anthropic has officially filed for its public debut on Nasdaq under the ticker ANT, revealing massive revenue growth and a unique governance structure.
