GoKawiilCenterPoint Energy confirms data breach after hacker leaks 7.49 million records
CenterPoint Energy has confirmed in an SEC filing that an unauthorized party accessed customer personal information through one of its external-facing systems. The disclosure follows claims from a hacker who says they exfiltrated 7.49 million records—including names, addresses, account numbers, billing details and partial Social Security numbers—by exploiting an unprotected public API lacking rate limiting or firewall defenses.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident highlights how basic security gaps, like missing rate limits on public-facing APIs, can expose millions of utility customers' sensitive financial and personal data. Because CenterPoint serves roughly 7 million metered accounts across four states, the breach could have wide-reaching implications for identity theft risk and regulatory scrutiny of utility cybersecurity practices.
- CenterPoint Energy confirmed a data breach in an SEC filing but hasn't disclosed the number of affected customers.
- A hacker claims to have stolen 7.49 million records via an unsecured public API lacking rate limiting and firewall protection.
- Leaked data reportedly includes names, addresses, account numbers, billing amounts, and partial Social Security numbers.
Aura Identity Theft Protection Subscription — With millions of records including partial SSNs exposed in this breach, monitoring your identity for fraudulent use is a smart move. Aura offers identity theft monitoring and alerts that can help you catch misuse of your personal data early after incidents like this one.
See Aura Identity Theft Protection Subscription on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-15
Published there as: “CenterPoint Energy confirms customer data stolen in cyberattack”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.