Home / Business and Economy / CenterPoint Energy Breached: Millions of Files Stolen
CenterPoint Energy Breached: Millions of Files Stolen
16 Sep
Summary
- CenterPoint Energy confirmed a cyberattack with customer data theft.
- Millions of files, including SSNs and IDs, were allegedly stolen.
- The breach occurred via an exposed API, but operations remain unaffected.
CenterPoint Energy is currently investigating a cyberattack that resulted in the theft of customer data. The company confirmed awareness of an online post by a third party claiming to have obtained a data set containing customer information. This breach reportedly occurred through an external-facing system with an exposed API.
The threat actor claims to have stolen approximately 7.49 million files. These files allegedly include customer names, contact details, billing information, move-in dates, driver's license data, and partial Social Security numbers. CenterPoint Energy has activated its incident response protocols and engaged third-party cybersecurity experts to determine the full scope of the incident.
While the cyberattack did not disrupt CenterPoint Energy's ongoing operations, the company has incurred expenses related to the investigation and anticipates further costs. Regulatory agencies and law enforcement have been notified, and affected customers will be informed as required by law.
