CenterPoint Energy Data Breach Exposes 7.49M Records

CenterPoint Energy, a Houston-based utility company that delivers electricity and natural gas to approximately seven million metered customers across multiple U.S. states, is the subject of an alleged data breach.

On Sept. 1, 2026, a threat actor using the handle "4d722e4d656f77" posted on the open web claiming to have leaked a database belonging to CenterPoint Energy. The dataset contains approximately 7.49 million raw, unfiltered records stored in JSON format, along with about 6.73 million filtered records in CSV format.

According to the dark web intelligence summary associated with this posting, the types of information allegedly exposed include customer names, phone numbers, service and billing addresses, account information, premise IDs, billing amounts, payment status, service details, autopay and paperless billing status and partial Social Security numbers.

At the time of this report, no official state attorney general filings or federal agency disclosures related to this incident have been publicly made.

CenterPoint Energy's response to the breach

As of Sept. 8, 2026, the full scope of CenterPoint Energy's response to this alleged breach remains unclear.

Given that the information allegedly exposed includes partial Social Security numbers, billing details and account information, affected customers could face elevated risks of identity theft and fraud. Customers who are concerned about their personal information should watch for official communications directly from CenterPoint Energy.

Customers should be wary of any unsolicited communication asking them to provide personal details or click on unfamiliar links.