Home / trends / CenterPoint Energy says customers’ personal info obtained in data breach

trends

CenterPoint Energy says customers’ personal info obtained in data breach

2026-09-17

EVANSVILLE, Ind. (WFIE) – Personal information belonging to CenterPoint Energy customers was obtained by an unauthorized third party in a recent data breach, according to the utility company.

In an SEC filing made Monday, the company revealed that customer data had been obtained through one of its “external-facing systems.”

The filing says that CenterPoint became aware of an online post in September claiming to have obtained a dataset containing customer information.

After looking into the claim, CenterPoint said officials determined that it was true.

After becoming aware of the post, CenterPoint said immediate action was taken to address the situation. Company officials say the investigation is ongoing and that they have cybersecurity insurance they believe will offset any related costs.

14 News reached out to CenterPoint Energy to ask if Evansville-area customers were among those impacted. A company spokesperson responded with a formal statement: “Our filing speaks for itself.”

You can read the full filing below.

In September 2026, CenterPoint Energy, Inc. (the “Company”) became aware of an online post by a third party claiming to have obtained a data set containing certain of the Company’s customer information. Upon becoming aware of the post, the Company promptly took action and activated its cybersecurity incident response protocols, initiated an investigation with the assistance of third-party cybersecurity experts, and took steps to further protect the Company’s systems.

The Company’s delivery of electric and gas services has not been impacted and remains operational and undisrupted. As of the date of this filing, the Company does not believe it is reasonably likely that there will be a material impact on the Company’s financial condition or results of operations.

While the investigation remains ongoing, the Company has determined that an unauthorized third party obtained personal information relating to a portion of the Company’s customers through one of the Company’s external facing systems (the “Incident”). The Company is continuing to work with third-party experts to determine the scope of customers and personal information affected by the Incident and intends to notify affected customers and regulatory authorities as required by applicable law. The Company reported the matter to law enforcement authorities and has notified certain regulatory authorities of the issue.

The Company has incurred, and expects to continue to incur, certain expenses related to the Incident and its response to the Incident. The Company maintains customary cybersecurity insurance coverage and believes this insurance will offset related costs.

Source link

CenterPoint Energy,data breach,CenterPoint data breach,customer info,cyber attack,Evansville
#CenterPoint #Energy #customers #personal #info #obtained #data #breach