CenterPoint Energy disclosed that an unauthorized third party accessed personal information tied to some customers after a threat actor claimed to have stolen and leaked 7.49 million records. The company says its electric and gas services were not affected, while it continues investigating the scope of the incident and notifying impacted parties. #CenterPointEnergy #4d722e4d656f77
Keypoints
- CenterPoint Energy confirmed a breach involving customer personal information.
- A threat actor claimed to have stolen 7.49 million records from the company.
- The leaked data reportedly included names, addresses, account numbers, billing details, and partial SSNs.
- The attacker said they used CenterPoint’s public API, which lacked rate limiting and WAF protection.
- CenterPoint says its utility operations were not disrupted and is working with experts and authorities.