Key Facts
CenterPoint Energy stated in an SEC filing that an unauthorized third party obtained personal information relating to a portion of its customers through an external-facing system.
Technical Details
The company says its investigation remains ongoing and that it is determining the scope of customers and personal information affected. BleepingComputer reports that the filing does not identify the attacker or quantify affected customers.
Impact & Mitigation
CenterPoint says service operations were not impacted, it activated incident response, strengthened protections, and is notifying affected parties as required. Customers should watch for official notifications and related phishing attempts.