2026 CenterPoint Energy — Texas AG: 1,062,060 residents (names/addresses/SSNs/DLs)
Data compromised
Texas AG filing (published ~14 Oct 2026): 1,062,060 Texas residents — names, addresses, Social Security numbers, driver’s license numbers. Consumer notice not yet sent at filing. Actor claim (unverified): ~7.49M records incl. phones/emails/account/billing/autopay/SSN last-four. Other states (IN/MN/OH) not in the Texas census. recordsAffected 1062060 is the confirmed Texas count.
Technical writeup
Verified CenterPoint 8-K 14 Sep 2026 plus Texas AG report coverage 14–15 Oct 2026: 1,062,060 Texans; names/addresses/SSNs/DLs; notices pending. Actor 7.49M claim retained as unverified. Electric/gas delivery unaffected. companyConfirmed true; recordsAffected 1062060 (Texas-only).
Root cause
Unauthorized third party obtained customer personal information through an external-facing CenterPoint system (SEC 8-K 14 Sep 2026). Actor alleged unauthenticated/weakly protected API ID enumeration. Company learned of an online post claiming a customer dataset.
References
- https://www.securityweek.com/centerpoint-energy-data-breach-impacts-1-million-texans/
- https://abc13.com/post/more-1-million-customers-impacted-centerpoint-energy-data-breach-ag-report-filing-shows/19938921/
- https://www.sec.gov/Archives/edgar/data/48732/000110465926107560/tm2625326d1_8k.htm
- https://www.bleepingcomputer.com/news/security/centerpoint-energy-confirms-customer-data-stolen-in-cyberattack/