A Texas Utility’s Data Breach Exposes Millions of Customers’ Personal Info
CenterPoint Energy, a Houston-based public utility serving over 7 million customers across four US states, has confirmed that its systems have been compromised by an unauthorized third party. The disclosure comes after a hacker claimed to have stolen millions of records, including customer personal information, and made them available for download.
The company’s external facing systems were breached, allowing the hackers to access sensitive data belonging to some of its customers. While CenterPoint Energy has assured that the cybersecurity incident will not impact the delivery of electric and gas services, the breach is still a major concern due to the sheer number of affected records. The hacker allegedly obtained nearly 7.5 million user records, which could potentially be used for identity theft or other malicious purposes.
The attack is part of an ongoing trend of hackers targeting critical infrastructure companies, including energy providers. In recent years, several energy firms have been hit by data breaches, often attributed to the Cl0p ransomware group’s 2023 MOVEit campaign. Analysts believe that in some cases, the stolen data originated from third-party vendors rather than directly from the company’s systems.
This is not CenterPoint Energy’s first experience with a hacking incident. In 2024, it was one of several energy companies targeted by an access broker named AntiBrok3rs. A few months later, another hacker claimed to have obtained the company’s data. At the time, experts believed that the stolen data likely came from a third party rather than directly from CenterPoint Energy’s systems.
The fact that hackers are targeting critical infrastructure companies raises concerns about national security and the potential for disruptions to essential services. The breach highlights the need for robust cybersecurity measures and regular vulnerability assessments to prevent such incidents in the future.
As individuals, it is essential to be vigilant when receiving unsolicited emails or messages claiming to have access to sensitive information. Never click on suspicious links or provide personal data unless you are certain of the authenticity of the request.
For companies like CenterPoint Energy, this incident serves as a reminder to prioritize cybersecurity and regularly review their systems for vulnerabilities. Regularly updating software, conducting penetration testing, and implementing robust security protocols can help prevent such breaches from occurring in the first place.
Source: SecurityWeek — 2026-09-15