CenterPoint Hack: Millions of Records Stolen?

CenterPoint Energy is investigating a data breach after an external party claimed to have stolen millions of customer records. The utility company confirmed that an unauthorized third party accessed personal information through an external-facing system. This occurred on September 14, 2026, as detailed in a filing with the SEC.

A hacker, using the alias "4d722e4d656f77," asserted they obtained 7.49 million CenterPoint customer records. These alleged records include names, phone numbers, addresses, account numbers, billing information, and partial Social Security numbers. CenterPoint has not verified these specific claims or the total number of affected individuals.

The hacker suggested the data was accessed via a public API lacking sufficient protections against automated requests. CenterPoint has not confirmed this attack method but stated that information was obtained through an external system. The company plans to notify affected customers and regulators once the scope is fully determined.

Stolen utility data can be valuable to scammers, providing them with enough personal details to make fraudulent communications appear legitimate. Customers are advised to watch for fake CenterPoint communications, such as urgent requests for payment or account verification via text or email. It is recommended to contact CenterPoint directly through official channels if suspicious messages are received.

To protect themselves, customers should watch for official breach notifications, consider credit freezes if Social Security information was involved, and regularly check credit reports and financial accounts for suspicious activity. Securing email and utility accounts with strong, unique passwords and two-factor authentication is also crucial. Awareness of utility shutoff threats as a potential scam tactic is advised, alongside using robust antivirus protection and reducing publicly available personal information.