On September 1, 2026, a threat actor claimed to have breached CenterPoint Energy's systems and posted about the incident on an open web forum. The actor alleged that a database containing approximately 7.49 million raw records and 6.73 million filtered records related to CenterPoint Energy customers was leaked. This information has not been publicly confirmed by CenterPoint Energy.
The compromised data reportedly includes customer names, phone numbers, service and billing addresses, account information, premise IDs, billing amounts, payment status, service details, autopay and paperless billing status, and partial Social Security numbers. No medical data was identified as being exposed.
Details surrounding the incident may emerge as investigations proceed. Official notices to consumers and regulators have not been publicly identified at this time.