Utility Firm CenterPoint Energy Acknowledges Cyberattack Exposing Customer Data

CenterPoint Energy announced that it has been the target of a cyber intrusion that resulted in the unauthorized acquisition of personal information belonging to a portion of its customer base. The utility confirmed that an external party leaked data it claims was taken from the company's systems, prompting the firm to publicly disclose the breach.

The compromised records are reported to include typical customer identifiers such as names, mailing addresses, account numbers and, in some cases, contact details. While the company has not quantified the exact number of affected individuals, it emphasized that the breach does not appear to involve payment card data or other highly sensitive financial credentials.

This incident adds to a growing list of attacks on energy providers, a sector that has become an attractive target for cybercriminals seeking to exploit large volumes of personal data and disrupt critical infrastructure. Recent years have seen heightened scrutiny of utility cybersecurity practices, with regulators and industry groups urging firms to adopt stronger defenses against increasingly sophisticated threats.

In response, CenterPoint Energy said it has engaged third‑party cybersecurity experts to investigate the scope of the intrusion and to determine how the attackers accessed its networks. The company also reported the matter to law enforcement and is cooperating with relevant authorities. Customers have been notified through direct communication and are being advised to monitor their accounts for any unusual activity.

Regulators may require additional reporting or remediation steps, and the breach could trigger oversight reviews of the utility’s data protection policies. For customers, the exposure of personal details raises concerns about identity theft and phishing attempts, prompting many to consider enrolling in credit monitoring services or updating security settings on related accounts.

CenterPoint Energy indicated that it will continue to provide updates as the investigation progresses and that it is implementing enhanced security measures to prevent future incidents. The episode underscores the broader challenge facing utilities to balance operational reliability with the protection of customer information in an era of escalating cyber risk.