CenterPoint Energy confirms cyberattack after threat actor claims data theft

CenterPoint Energy has confirmed a major cyber security breach following claims by a threat actor that its internal network was compromised and sensitive data was stolen.

 

CenterPoint Energy is a major U.S. utility company providing electricity and natural gas services to millions of customers. Its operations include natural gas distribution, electric transmission and distribution, and optional home service plans for appliance and utility-line repairs. The company operates across several states, including Texas, Indiana, Minnesota, Ohio, Louisiana, Mississippi, Arkansas, and Oklahoma.

 

Earlier this week, a threat actor using the alias “4d722e4d656f77” claimed to have breached the internal network of CenterPoint Energy and stole roughly 7.49 million customer records including names, Social Security numbers, phone numbers, service and billing addresses, account numbers, and billing amounts.

 

 

According to the dark web post, the data was allegedly accessed through a company-managed API. The threat actor claims the API lacked adequate authorisation and rate-limiting controls, potentially exposing a significantly larger dataset. The actor has also provided a link to download the allegedly stolen database, suggesting that ransom negotiations may have failed.

 

Following the claims of the threat actor, in a filing with the U.S. Securities and Exchange Commission (SEC), CenterPoint Energy said that it recently “became aware of an online post by a third party claiming to have obtained a data set containing certain of the Company’s customer information.”

 

The company immediately launched an investigation, with assistance from external cyber security experts, to determine the scope of the incident. It also activated its incident response and business continuity protocols and notified law enforcement authorities about the incident.

 

“While the investigation remains ongoing, the Company has determined that an unauthorised third party obtained personal information relating to a portion of the Company’s customers through one of the Company’s external facing systems,” CenterPoint Energy said.

 

The company is investigating the breach with third-party experts to assess the impact, while actively notifying regulators, law enforcement, and affected customers as required by law.

 

“The Company’s delivery of electric and gas services has not been impacted and remains operational and undisrupted. As of the date of this filing, the Company does not believe it is reasonably likely that there will be a material impact on the Company’s financial condition or results of operations,” CenterPoint Energy added.