CenterPoint Energy Data Theft: 1M+ Texans' SSNs and IDs Exposed After Hacker Leak
Personal records including Social Security numbers were compromised in a data theft affecting more than one million residents of Texas.
Key points
- Over 1.06 million Texas residents had personal data exposed in the breach.
- Compromised records include names, addresses, Social Security numbers, and driver's license numbers.
- The utility confirmed it learned of the incident after a hacker posted about the theft online.
CenterPoint Energy has notified Texas authorities that the personal information of more than 1 million individuals was compromised in a data breach. The Houston-based utility disclosed the incident to the state Attorney General’s Office, confirming that the exposure affects a significant number of its customers in the region.
The company filed a report with the Securities and Exchange Exchange Commission stating that customer information was stolen from its systems. According to SecurityWeek, the utility confirmed it became aware of the breach only after a threat actor boasted about the theft on a cybercrime forum.
Timeline of the disclosure
The hacker announced the acquisition of nearly 7.5 million user records from CenterPoint Energy on a known cybercrime forum. This public post preceded the utility’s initial disclosure to regulators by just a few days. The company stated in its SEC filing that the incident did not impact its operational services.
On September 12, the threat actor made a 2.5-gigabyte archive available for download. This file allegedly contains data exfiltrated from the utility, including approximately 3 million phone numbers along with additional personal information. The timing of this release aligns with the subsequent regulatory notifications.
Scope of the impact
CenterPoint Energy told the Texas Attorney General’s Office that 1,062,060 state residents were affected by the data theft. The compromised information includes sensitive identifiers such as names, addresses, Social Security numbers, and driver’s license numbers. These details are frequently targeted in identity theft schemes.
The utility also delivers electricity and natural gas to customers in Indiana, Minnesota, and Ohio. Residents of those states might have been affected as well, but the total impact from the incident remains unclear. The company has not released specific numbers for those regions.
Our take on the response
SecurityWeek reports that CenterPoint Energy appears not to have sent notification letters to the impacted individuals yet. The outlet emailed the company for clarification on how many individuals were impacted overall and plans to update its coverage if the company responds. Customers should monitor official channels for direct communication.
For customers and users
Individuals should review their credit reports for unfamiliar accounts or inquiries that they did not authorize. Since Social Security numbers were exposed, placing a fraud alert or credit freeze with major bureaus can prevent new accounts from being opened in your name. Monitor bank statements for small, unauthorized transactions that often signal stolen card data. Be wary of unsolicited calls or emails claiming to be from the utility; legitimate companies rarely ask for passwords or full SSNs via phone or email. Check your mailbox for physical letters, as digital notifications can sometimes be missed or filtered.
What to do and how to stay safe: CenterPoint Energy
- Review credit reports from Equifax, Experian, and TransUnion for unauthorized activity.
- Place a fraud alert or credit freeze on your credit files to restrict new account openings.
- Monitor financial statements for small, unexpected charges that may indicate card testing.
- Ignore unsolicited requests for personal information and verify contact details through official websites.
Step-by-step guide: 7 Credential Leak Mistakes That Expose Your Accounts
General security guidance from the DataSafe Radar newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What specific data was stolen from CenterPoint Energy customers?
The breach exposed names, addresses, Social Security numbers, and driver’s license numbers of affected individuals.
How many people were affected in Texas?
CenterPoint Energy reported to the Texas Attorney General that 1,062,060 state residents were affected.
Did the breach affect customers in other states?
The impact on customers in Indiana, Minnesota, and Ohio remains unclear, though they may have been affected.
