CenterPoint Energy Tells SEC Customer Data Was Stolen After 7.5Mn Records Advertised Online

CenterPoint Energy disclosed that an unauthorized party obtained customer personal information and a cybercrime forum post advertised a dataset claimed to cover about 7.5 million records. The actor alleged the data came from an unauthenticated API and included names, contact details, service and billing information, driver’s license numbers and last-four SSNs; CenterPoint has opened a forensic investigation, reported to law enforcement, and has not observed operational impacts.