CenterPoint Energy, Inc. (“CPE”) is a publicly traded, Houston-based electric and natural gas utility company. It recently experienced a data security incident, potentially exposing the sensitive data belonging to what a threat actor claims to be 7.49 million CPE customers.
On September 14, 2026, CPE filed a Form 8-K with the United States Securities and Exchange Commission. The form describes “an online post by a third party claiming to have obtained a data set containing certain of the Company’s customer information.” CPE is likely referring to a dark web post by a hacking/extortion actor alleging to have stolen 7.49 million CPE customers’ Personally Identifiable Information. Cyber Insider analyzed the post and explains that the threat actor claims to have stolen CPE customers’ names, phone numbers, email addresses, service and billing addresses, account and premise identifiers, billing amounts, payment information, autopay and paperless billing statuses, and the last four digits of Social Security numbers. In its September 14, 2026 Form 8-K, CPE confirmed that an unauthorized third party obtained certain CPE customers’ personal information, but CPE has yet to detail what information was compromised and how many of its customers were impacted.
If you are a CPE customer and believe you might have been impacted by the data breach, you can contact Goldenberg Schneider, LPA for additional information about your legal rights by calling 513-982-1569, sending an email to [email protected] or completing the “Contact Us” form to the right.