CenterPoint Confirms Data Breach As Hacker Claims 7.49 Million Records
CenterPoint Energy disclosed a cybersecurity incident in a Sept. 14 SEC filing, and a hacker claims 7.49 million customer records were stolen, including billing data and partial Social Security numbers.[1]
The company says an unauthorized third party accessed personal information through an external-facing system but has not determined how many customers were affected. CenterPoint says electric and natural gas services remained operational and it does not expect a material impact on its financial condition. The company says it will notify affected customers and regulators once it determines the incident's scope and has engaged external cybersecurity experts to assist the investigation.
On Sept. 14, CenterPoint filed the notice with the Securities and Exchange Commission disclosing the cybersecurity incident. The filing said an unauthorized third party obtained personal information via an external-facing system and did not list a number of affected customers.
A hacker posted a claim that 7.49 million records were taken, listing addresses, account numbers, billing details and partial Social Security numbers.[1] CenterPoint has not confirmed that total and says it will notify customers and regulators after completing its review.
Show source details & analysis (1 source)
📌 Key Facts
- On Sept. 14, 2026, CenterPoint Energy filed a notice with the SEC disclosing a cybersecurity incident involving customer data.
- The company says an unauthorized third party obtained personal information for some customers via an external-facing system but has not stated how many customers were affected.
- A hacker claims to have stolen 7.49 million customer records, including addresses, account numbers, billing data and partial Social Security numbers, a figure CenterPoint has not confirmed.
- CenterPoint reports that electric and natural gas services remained operational during the incident and says it does not expect a material impact on its financial condition.
- CenterPoint says it will notify affected customers and regulators once it determines the incident’s scope and has engaged external cybersecurity experts to assist the investigation.
📰 Source Timeline (1)
Follow how coverage of this story developed over time