CenterPoint Energy Data Breach: More Than 1 Million Texans Affected
CenterPoint Energy told Texas a breach exposed personal data of 1,062,060 residents, including Social Security numbers.
CenterPoint Energy, a regulated gas and electric utility, told the Texas Attorney General that a breach affected 1,062,060 Texas residents. Exposed data includes names, addresses, Social Security information, and driver’s-license numbers, and individual letters had not yet been sent. In an SEC Form 8-K, the company said an unauthorized party obtained customer information through an external-facing system. A forum user earlier claimed about 7.49 million records and a 2.5 GB archive taken through an API lacking authentication, rate limiting, and a WAF.
- Texas filing lists 1,062,060 affected residents.
- Data includes names, addresses, Social Security numbers, and driver’s licenses.
- A forum actor claimed about 7.49 million records via an unauthenticated API.
- CenterPoint’s SEC filing says the investigation and customer notices are ongoing.
- Threat actors
- 4d722e4d656f77
- Victims
- CenterPoint Energy
- Organizations
- CenterPoint EnergyTexas Attorney General's Office
- Countries
- United States
From the original article
2 min read at securityaffairs.com
The regulated utility company CenterPoint Energy says a data breach exposed the personal information of more than 1 million people in Texas. CenterPoint Energy is a regulated utility company used to deliver natural gas and electricity infrastructure, maintain power grids and pipelines, and restore service across parts of Texas, Indiana, Ohio, and Minnesota. The organization […]
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.