Texas-based utility company CenterPoint Energy has confirmed a data breach after a hacker claimed to have stolen millions of customer records. The disclosure comes just days after the hacker posted the allegedly stolen data online.
CenterPoint Energy serves around 7 million customers across Indiana, Minnesota, Ohio, and Texas, providing electricity and natural gas services. The company has stated that an unauthorized third party obtained personal information through one of its external facing systems. While the investigation is ongoing, CenterPoint Energy assured that the breach has not impacted its ability to deliver electric and gas services.
The data breach was first reported on a popular cybercrime forum, where the hacker claimed to have stolen nearly 7.5 million user records. The threat actor allegedly obtained access to this information through one of the company’s external facing systems, which may have been compromised due to a vulnerability or phishing attack. Security experts warn that hackers often exaggerate their claims, and it’s impossible to verify the authenticity of the leaked data at this time.
This is not CenterPoint Energy’s first experience with a hacking incident. In 2024, the company was targeted by an access broker named AntiBrok3rs, which also claimed to have stolen its data. Analysts later discovered that the compromised data originated from a third party, rather than directly from CenterPoint Energy’s systems. It appears that the company has been a target for hackers in the past, and this latest incident highlights the ongoing threat of cyber attacks against critical infrastructure providers.
The fact that CenterPoint Energy’s customer records have been compromised raises concerns about potential identity theft and financial fraud. Customers are advised to monitor their bank statements closely and report any suspicious activity to their banks immediately. The company has not specified how long it will take to complete its investigation or what measures it plans to implement to prevent similar breaches in the future.
As a security-aware consumer, it’s essential to understand that data breaches can happen to anyone, regardless of the company’s size or reputation. To minimize your risk, always use strong and unique passwords for all accounts, enable two-factor authentication whenever possible, and be cautious when clicking on links or downloading attachments from unknown sources. By staying vigilant and taking proactive measures, you can reduce the likelihood of falling victim to a data breach.
Source: SecurityWeek — 2026-09-15