CenterPoint Energy Breach Exposes Sensitive Data of More Than 1 Million Texans

CenterPoint Energy reported to the Texas Attorney General’s Office that a data breach affected 1,062,060 Texas residents, exposing names, addresses, Social Security numbers, and driver’s license numbers. The utility disclosed the incident in a September SEC filing after learning of the theft through a threat actor’s public post. Its investigation confirmed unauthorized access through an externally facing system, but the company reported no evidence of disruption to services or operations.

The attacker claimed to have obtained nearly 7.5 million user records and made a 2.5-gigabyte archive allegedly containing stolen data available on September 12. That claim does not establish the number of affected individuals; the overall scope remains unclear, including whether customers in Indiana, Minnesota, and Ohio were affected. SecurityWeek reported that individual notification letters apparently had not yet been sent. The exposed identifiers create identity-theft risks despite the absence of reported operational disruption.