Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data

Texas utility CenterPoint Energy confirmed on Monday that a threat actor has obtained customers’ personal information. The disclosure comes just days after a hacker claimed to have stolen millions of records.

CenterPoint Energy is a Houston-based public utility that delivers electricity and natural gas to roughly 7 million customers across Indiana, Minnesota, Ohio, and Texas.

The company told the SEC that it has launched an investigation after becoming aware of someone claiming to have obtained customer information.

“While the investigation remains ongoing, the Company has determined that an unauthorized third party obtained personal information relating to a portion of the Company’s customers through one of the Company’s external facing systems,” it said in the SEC filing .

The utility noted that the cybersecurity incident has not impacted the delivery of electric and gas services and it does not believe that the data breach will have a material impact.

The company’s disclosure comes after a hacker leaked data allegedly stolen from its systems. The claims were made on a popular cybercrime forum on September 12.

The hacker allegedly obtained nearly 7.5 million user records, threatening that “ time we won’t simply pull data, we’ll start attacking the main infrastructure.”

The threat actor has made available for download a 2.5 GB archive file allegedly containing data stolen from CenterPoint Energy. SecurityWeek cannot confirm the validity of the data and it’s not uncommon for hackers to make false or exaggerated claims.

This is not the first time a hacker has claimed to have stolen CenterPoint Energy data. In 2024, it was one of several energy companies targeted by an access broker named AntiBrok3rs .

A few months later, a different hacker claimed to have obtained the company’s data. In both cases, the stolen data was believed to have come from the Cl0p ransomware group’s 2023 MOVEit campaign . Analysts believed at the time that the CenterPoint Energy data originated from a third party rather than directly from the company’s systems.

Related : 240,000 Hit by Data Breach at Japan’s Digital Agency

Related : Personal, Financial Info Exposed in Revolut Data Breach

Related : Telus Warns Customers of Account Breaches

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

More from Eduard Kovacs

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation

Telus Warns Customers of Account Breaches

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack

Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison

Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion

Cybersecurity M&A Roundup: 33 Deals Announced in August 2026

Widened Scan Turns Up Fourth Rogue Claude Cyber Incident

Organizations Warned of Cisco Secure FMC Exploitation

$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws

Exein Secures $270M at $1.7B Valuation for Physical AI Security

Thai Broadband Provider Hacked via Fortinet Vulnerability

OpenAI Investigates Report Linking AI Agents to RubyGems Attack

240,000 Hit by Data Breach at Japan’s Digital Agency

Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases

Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints

Hacked HBO Max Account Used for Malware Delivery via ClickFix Attack

Virtual Event: Attack Surface Management Summit 2026

Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.

Webinar: Building Continuous Authorization at Scale

Explore what it takes to operationalize continuous authorization at scale, including the technical, organizational, and cultural changes required.

Flipboard Whatsapp Whatsapp Email