CenterPoint Energy Data Breach
CenterPoint Energy, a Fortune 500 electric and natural gas utility enterprise serving millions of consumers across Texas, Indiana, Minnesota, and Ohio, suffered a massive customer data scraping incident impacting an external API.
Exposed Data Types
7- Names
- Phone numbers
- Physical addresses
- Account numbers
- Billing information
- Driver's licenses
- Social security numbers
About This Breach
Following an official Form 8-K filing with the U.S. Securities and Exchange Commission (SEC), forensic disclosures confirmed that a threat actor scraped approximately 7.49 million customer records through a public-facing API that lacked proper rate-limiting and web application firewall (WAF) defenses. Compromised attributes include customer full names, telephone numbers, service and billing addresses, utility account numbers, billing balances, driver's license numbers, and partial Social Security numbers (SSNs).
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
