CenterPoint Energy has disclosed a data breach affecting customer personal information, according to a securities filing made Monday. The utility company revealed that an unauthorized third party accessed customer data through one of its external-facing systems.
Breach Discovered Through Online Post
The company first became aware of the incident in September 2026 after discovering an online post by a third party claiming to have obtained a dataset containing customer information. Following an investigation, CenterPoint confirmed the claim was valid.
Company Response and Investigation
Upon learning of the breach, CenterPoint said it took immediate action, activating its cybersecurity incident response protocols and launching an investigation with assistance from third-party cybersecurity experts. The company also implemented additional measures to protect its systems.
Electric and gas service delivery remains operational and undisrupted, according to the filing. The investigation is ongoing as the company works to determine the full scope of affected customers and the specific personal information compromised.
Financial Impact and Insurance
CenterPoint stated it does not believe the breach will have a material impact on its financial condition or results of operations. The company maintains cybersecurity insurance coverage that it believes will offset related costs, though it expects to continue incurring expenses associated with the incident response.
Notification and Regulatory Compliance
The company has reported the matter to law enforcement authorities and notified certain regulatory agencies. CenterPoint intends to notify affected customers and regulatory authorities as required by applicable law.
Local Impact Unclear
When asked whether Evansville-area customers were among those impacted, a company spokesperson provided a formal statement: “Our filing speaks for itself.”
The full SEC filing is available for public review.
