INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

CenterPoint Energy Experiences Data Breach Affecting More Than 1 Million

| 2026-10-16 07:31 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A data breach at CenterPoint Energy, a regulated utility company in Texas, exposed the personal information of more than 1 million Texans. The attack is believed to have occurred through an API lacking proper security measures such as WAF protection and authentication. The attackers claimed they stole over 7.49 million customer records before being detected by the company's incident response team. CenterPoint Energy has activated its procedures, engaged external experts, and continues to investigate the breach while notifying affected individuals in accordance with applicable legal requirements.
Technical Mitigations AI-generated
• Patch the API to address WAF protection, rate limiting, and authentication vulnerabilities. • Implement proper authentication mechanisms for external-facing systems. • Regularly review and update system logs to detect potential security incidents.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope energyenergy
Incident Timeline
‎September 12
A threat actor using the alias “4d722e4d656f77” claimed to have extracted approximately 7.49 million customer records from CenterPoint Energy on September 12.
data_breach 7.49 customer records
Days before the first disclosure, on September 12, a threat actor using the alias “4d722e4d656f77” claimed on a cybercrime forum to have extracted roughly 7.49 million customer records from CenterPoint Energy.
‎2026/09/16
Threat actors exploited a vulnerability to gain unauthorized access to CenterPoint Energy's systems, affecting more than 1 million Texans.
‎September 2026
Threat actors claimed to have obtained over 1 million Texans' customer information through an API lacking proper security measures.
organisation CenterPoint Energy, Inc.
“In September 2026, CenterPoint Energy, Inc. (the “Company”) became aware of an online post by a third party claiming to have obtained a data set containing certain of the Company’s customer information.”
organisation Company
“In September 2026, CenterPoint Energy, Inc. (the “Company”) became aware of an online post by a third party claiming to have obtained a data set containing certain of the Company’s customer information.”
organisation SecurityAffairs
“We continue to work with third-party experts to assess the scope of affected customer data to identify which customers will be provided notifications in accordance with applicable legal requirements.” Follow me on Twitter:  @securityaffairs  and  Facebook  and  Mastodon Pierluigi Paganini ( SecurityAffairs  – hacking, data breach)
organisation the “Incident”
reads the FORM 8-K report filed with SEC.”While the investigation remains ongoing, the Company has determined that an unauthorized third party obtained personal information relating to a portion of the Company’s customers through one of the Company’s external facing systems (the “Incident”).”
organisation API
The attackers claimed they stole over the records through an API they say lacked proper WAF protection, rate limiting, and authentication.
organisation CenterPoint
Upon learning of the issue, CenterPoint activated our incident response procedures and engaged external cybersecurity, forensic, and legal advisors to assist with the investigation.”
data_breach 2.5 GB
He offered a 2.5 GB archive for download.
‎2026/10/16
Threat actors did not explicitly state in the snippet, but CenterPoint Energy disclosed a data breach affecting more than 1 million people in Texas.
organisation CenterPoint Energy Data Breach
CenterPoint Energy Data Breach: More Than 1 Million Texans Affected.
organisation CenterPoint Energy
CenterPoint Energy Data Breach: More Than 1 Million Texans Affected The regulated utility company CenterPoint Energy says a data breach exposed the personal information of more than 1 million people in Texas.
organisation General’s Office
This week, CenterPoint Energy told the Texas Attorney General’s Office that the breach affected 1,062,060 Texas residents.
organisation Click2Huston
reported the broadcast Click2Huston.
organisation Social Security
The information involved includes customers’ names, addresses, Social Security information and driver’s-license numbers.”
Tactical Metrics
Metrics
data_breach
7,490,000
Customer Records
Days before the first disclosure, on September 12, a threat actor using the alias “4d722e4d656f77” claimed on a cybercrime forum to have extracted roughly 7.49 million customer records from CenterPoint Energy.
Metrics
data_breach
2
Gb
He offered a 2.5 GB archive for download.
Intelligence Sources
Security Affairs 2026-10-16