The energy company reported the data incident in an SEC filing on Monday, claiming that an "unauthorized third party" obtained the customer information through one of its "external-facing systems."
The SEC filing stated in part:
"In September 2026, CenterPoint Energy, Inc. (the "Company") became aware of an online post by a third party claiming to have obtained a data set containing certain of the Company's customer information. Upon becoming aware of the post, the Company promptly took action and activated its cybersecurity incident response protocols, initiated an investigation with the assistance of third-party cybersecurity experts, and took steps to further protect the Company's systems."
CenterPoint Energy said that its electricity or gas services were not impacted by the incident, stating that its operations remain uninterrupted.
Company officials stated that they are working with third-party experts to "determine the scope of customers and personal information affected" by the data breach, adding that they expect to notify affected customers and regulatory authorities as required by law. The company said it also reported the incident to law enforcement.
When ABC13 asked CenterPoint Energy officials about what customer information was obtained, which customers were affected, how the data was accessed, or when the incident happened, company officials pointed back to the SEC filing.
This is a developing story. Eyewitness News is continuing to gather facts.
For the latest breaking news, weather and traffic, ABC13 is now live on Disney+. Always on, always under the live tab on Disney+ and everywhere you stream.