CenterPoint Energy Data Breach Exposes Customer Personal Data

Key Takeaways

• CenterPoint Energy confirmed a data breach impacting a portion of its customer base.
• An unauthorized third party gained access to personal information via an internet-facing company system.
• The specific number of affected individuals and the precise categories of exposed data remain under investigation.
• Utility operations for electricity and gas delivery were not impacted by the incident.

CenterPoint Energy, the Houston-based utility provider, has publicly disclosed a data breach where an unauthorized entity accessed personal customer information through an internet-accessible company system. The incident was formally reported to the U.S. Securities and Exchange Commission (SEC) on September 14, 2026.

Incident Discovery and Response

The company stated it became aware of the potential data exposure after encountering an online post from a third party asserting possession of a dataset containing customer information. Promptly upon this discovery, CenterPoint initiated its established cybersecurity incident response protocols. The utility engaged external cybersecurity specialists to launch a thorough investigation and implemented additional security measures to fortify its systems against further intrusion.

According to the filing, CenterPoint has verified that an unauthorized party did indeed gain access to personal information pertaining to some of its customers. However, the company has not yet provided details regarding the total number of individuals impacted, the specific types of personal data compromised, or the identity of the attacker.

Ongoing Investigation and Scope

The investigation into the breach is currently active, with CenterPoint collaborating closely with third-party incident response experts to ascertain the full extent of the compromise. This includes pinpointing precisely which customers were affected and the exact nature of the information extracted from the exposed system. CenterPoint intends to inform affected customers and relevant regulatory bodies as mandated by applicable data breach notification laws. Law enforcement and certain regulators have also been apprised of the situation.

Crucially, CenterPoint has confirmed that its core electric and gas delivery operations remain unaffected by this cybersecurity incident. Service delivery continues without disruption, indicating that the breach targeted customer-facing systems rather than critical operational technology responsible for grid management or gas distribution. This distinction is vital in the energy sector, where cyber incidents impacting operational technology could lead to service outages and broader infrastructure risks, whereas compromises of business or customer systems typically expose personal data, billing details, or account information.

CenterPoint has not yet released technical specifics concerning the internet-facing system involved in the breach. The filing also did not elaborate on the method of access, whether it involved exploited software vulnerabilities, stolen credentials, weak authentication, cloud misconfigurations, or other intrusion vectors. External-facing systems are frequent targets for threat actors who routinely scan these environments for unpatched vulnerabilities, exposed remote access services, leaked login credentials, improperly configured storage platforms, or application security flaws.

Financial Implications and Future Outlook

The utility has already incurred costs related to incident response and anticipates additional expenses as the investigation progresses. These projected costs encompass forensic analysis, legal consultation, regulatory notifications, customer communications, necessary security enhancements, and potentially identity protection services for affected customers. CenterPoint maintains cybersecurity insurance, which it expects will help mitigate breach-related costs. At present, the company does not foresee the incident having a material impact on its financial health or operational performance.

Nevertheless, CenterPoint cautioned that the ultimate scope of the breach could prove to be more extensive than currently understood. The ongoing review will be instrumental in determining the full extent of exposed customer data, required remediation efforts, regulatory obligations, insurance recovery, and the long-term implications of the incident.

What You Should Do

• Remain vigilant for any suspicious communications or unsolicited requests for personal information, especially those claiming to be from CenterPoint Energy.
• Be wary of phishing attempts via email, text, or phone calls that might leverage information potentially exposed in the breach.
• Consider enabling multi-factor authentication (MFA) on all online accounts, particularly those associated with utility services.
• Monitor your financial statements and credit reports for any unauthorized activity. Free credit reports are available annually from each of the three major credit bureaus.
• Review privacy settings on all online accounts and strengthen passwords using a password manager.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.