Overview
- CenterPoint told Texas authorities that 1,062,060 state residents had personal data exposed, a figure published in the Texas Attorney General’s breach database on Oct. 14.
- The company first disclosed the incident in a Sept. 14 SEC filing after seeing a third party post online claiming to hold customer records and it immediately activated its incident response and hired outside cyber and legal advisers.
- CenterPoint reported that the compromised fields include names, addresses, Social Security numbers, and driver’s license numbers, which raise elevated risk of identity fraud for affected people.
- The utility says its electric and gas delivery remained operational and undisrupted, and the AG filing indicated affected consumers had not been notified at the time the report was submitted.
- Texas law requires prompt breach reporting and timely consumer notice, so CenterPoint’s ongoing scope assessment could change the public tally and trigger required notifications to residents in Texas and possibly other states the company serves.