CenterPoint Energy confirms breach as hacker claims 7.5M files
The utility, serving about 7 million customers in four US states, told the SEC customer data was taken. A hacker claims 7.49 million files.
By Dev Okafor · Published · Updated · 4 min read
US utility CenterPoint Energy has confirmed that an unauthorized party obtained personal information belonging to some of its customers, Breached.Company reports.
What we know
- CenterPoint disclosed the incident in an SEC Form 8-K dated September 14, 2026.
- A hacker using the alias "4d722e4d656f77" claims on a crime forum to have stolen 7.49 million customer files. CenterPoint has not confirmed that number.
- The company serves about 7 million electricity and gas customers in Indiana, Minnesota, Ohio and Texas.
- Power and gas services were not disrupted.
Why it matters
Utility customer records typically include names, home addresses, account numbers and sometimes payment details — useful for fake "your power will be cut off" scams. And because utilities run critical infrastructure, any intrusion raises the question of how well customer systems are separated from the systems that keep the lights on.
What customers should do
- Be suspicious of calls or texts demanding immediate payment to avoid disconnection. Utilities do not demand gift cards or crypto.
- Pay only through the official app, website or number on your bill.
- Watch for an official notice explaining what data of yours was involved.
