Vendor

CenterPoint Energy

2 mentions in 7 days · 2 in 30 days · 2 total · first seen Sep 16, 2026 · last 17h ago

Timeline2 articles

CenterPoint Energy Confirms Data Breach Exposing Customers’ Personal Information

CenterPoint Energy confirmed an unauthorized third party accessed customer personal data via an external system, disclosed in an SEC Form 8-K filing.

CenterPoint Energy disclosed in a September 14, 2026 Form 8-K that an unauthorized third party obtained personal information of some customers through one of the company's external systems. The company learned of the incident after an online post claimed possession of a customer dataset, then activated incident-response protocols and engaged external forensic specialists. Electric and gas delivery operations were unaffected and the company does not expect a material financial impact, though response, notification, and compliance costs are being incurred. The number of affected customers, data types, and threat actor remain undisclosed as the investigation continues.

GBHackersupdated Sep 16, 15:32 UTC · 13h agofirst Sep 16, 11:40 UTC · 17h agoData breach 5 sources

CenterPoint Energy confirms data breach following claims on hacking forum

CenterPoint Energy confirmed a breach after a hacker claimed stealing 7.49 million customer records via an unauthenticated API lacking WAF, rate limiting, and token checks.

CenterPoint Energy, a Houston-based utility serving about 7 million customers, confirmed in a September 14 SEC Form 8-K that an unauthorized third party accessed customer data through an external system after a hacker posted a 7.49 million-line dataset online. The exposed fields include names, phone numbers, addresses, account numbers, emails, driver's license numbers, and the last four digits of Social Security numbers. The hacker said the API had no web application firewall, rate limiting, certificate checks, or authentication token, and that a CAPTCHA stopped exfiltration at 7.49 million of a claimed 17.44 million lines. The company faces multiple class action lawsuits and is working with outside experts to determine scope.

Help Net Securityupdated Sep 16, 15:32 UTC · 13h agofirst Sep 16, 10:35 UTC · 18h agoData breach in the wild 5 sources

Appears with

threat actor 4d722e4d656f77 1 organization CenterPoint Energy 1 organization SEC 1 organization U.S. Securities and Exchange Commission 1 victim CenterPoint Energy 1 victim CenterPoint Energy customers 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.