CenterPoint Energy has confirmed a data breach affecting some of its customers' personal information, after an attacker claimed online to have stolen 7.49 million customer records. The Houston-based utility, which serves millions of customers across Indiana, Minnesota, Ohio, and Texas, disclosed the incident in a filing with the U.S. Securities and Exchange Commission on September 14, 2026.
According to the attacker's claims, reported by Bleeping Computer, the stolen data includes names, phone numbers, addresses, account numbers, billing amounts, and partial Social Security numbers. The company said an unauthorized third party accessed the information through an external-facing system and that its investigation into the full scope is ongoing.

Services unaffected, experts engaged

CenterPoint stressed that its electric and gas services were not impacted and that it does not expect a material effect on its business or financial condition. The company said it has engaged cybersecurity experts, strengthened system protections, and reported the incident to law enforcement.

Lawsuits follow disclosure

Multiple class-action lawsuits have already been filed against the company in Texas, Indiana, and Minnesota, with customers alleging the exposure occurred between August 17 and September 1. CenterPoint said it intends to notify affected customers and regulatory authorities as required.