CenterPoint Energy
Disclosed Sep 15, 202610 days agoConfirmed
CenterPoint Energy confirms customer data scraped via unprotected API
Houston utility CenterPoint Energy confirmed in an SEC filing that customer data was stolen. The attacker claimed 7.49 million records with names, addresses, account numbers, billing amounts and partial SSNs taken through a public API without rate limiting.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Sep 15, 2026 |
| Discovered | Sep 2026 |
| Attack | Scraping |
| Data exposed | Names, Phone numbers, Addresses, Financial, Social Security numbers |
| Sector | Energy · US |
| Status | Confirmed |
| Lawsuit or fine | Class actions filed (2026) |
Sources
| Source | |
|---|---|
| CenterPoint Energy confirms customer data stolen in cyberattackbleepingcomputer.com · News | News |
| CenterPoint Energy Form 8-Ksec.gov · SEC filing | SEC filing |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Sep 15 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.