US utility CenterPoint Energy said in a September SEC 8-K that after learning of an online post claiming to hold its customer data, it investigated and determined an unauthorized third party obtained personal information of a portion of customers through one of its external-facing systems [1]. The company says electric and gas service was not affected and it is still determining the scope; according to The Record, the dark web post claims about 7.5 million records including names, account details and last four SSN digits, which the company did not address [1][2]. CenterPoint customers should watch for the individual notices the company plans to send and beware of scams using account or billing details [1][2].
Backfill: this event became public on Sep 14, 2026 and we added it on Nov 11, 2026. It is not a new event.
HighMonitoringBackfillOfficially confirmed
US electric and gas utility CenterPoint Energy confirms external-facing system breach and customer data theft after dark web post
1 min read
- Disclosed
- Sep 14, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Energy
What to do nowOur advice
- Watch for individual notices from CenterPoint Energy [1].
Timeline
Technical details
Remediation
References
Official / primary1
- [1]
“the Company has determined that an unauthorized third party obtained personal information relating to a portion of the Company’s customers through one of the Company’s external facing systems”
Media1
- [2]
Corrections
- · confirmation_status: media_reported → official_confirmed未提供理由
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.