Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

CenterPoint Energy

Disclosed Sep 14, 20262,383,340 affectedConfirmed

SEC filing

CenterPoint Energy confirms customer data scraped via unprotected API

Houston utility CenterPoint Energy confirmed in an SEC filing that customer data was stolen. The attacker claimed 7.49 million records with names, addresses, account numbers, billing amounts and partial SSNs taken through a public API without rate limiting.

What is known

People affected2,383,340 (as reported by the organization)
DisclosedSep 14, 2026
DiscoveredSep 2026
HappenedAug 19, 2026
AttackScraping
Data exposedNamesPhone numbersAddressesFinancialSocial Security numbers
SectorEnergy · US
StatusConfirmed
Lawsuit or fineClass actions filed (2026)

Sources

Newsbleepingcomputer.com
CenterPoint Energy confirms customer data stolen in cyberattack
SEC filingsec.gov
CenterPoint Energy Form 8-K
Official noticeoag.my.site.com
Texas Attorney General data security breach report BR-0005412: CenterPoint Energy
Newssecurityweek.com
CenterPoint Energy Data Breach Impacts 1 Million Texans

Notices filed

TotalSep 14
SEC 8-K 8.01Count not stated
TotalSep 15
ResearchCount not stated
Residents of TXOct 13
Texas AG1,062,060 people
pressOct 15
Security newsCount not stated
Residents of TXOct 28
Texas AG970,891 people
History of this record
records2026-10-29
1611625 to 2383340by dailySource
source2026-10-16
empty to https://www.securityweek.com/centerpoint-energy-data-breach-impacts-1-million-texans/by dailySource
records_basis2026-10-14
empty to organizationby dailySource
records2026-10-14
empty to 1611625by dailySource
occurred2026-10-14
empty to 2026-08-19by dailySource
disclosed2026-09-25
2026-09-15 to 2026-09-14by backfillSource
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about CenterPoint Energy