# CenterPoint Energy Data Breach Investigation - Hall Attorneys, P.C. Canonical overview: https://hallattorneys.com/investigations/centerpoint-energy Published: September 12, 2026 Last reviewed: September 12, 2026 ## Investigation status Hall Attorneys is evaluating potential claims. This is an investigation, not a filed lawsuit, certified class, settlement, or court finding. ## Summary Hall Attorneys is evaluating potential claims after a September 12, 2026 Daily Dark Web report described an alleged leak of more than 7.49 million CenterPoint Energy customer records. The report attributes the data, access method, and record count to a threat actor and says those claims have not been independently verified. The figure is not a confirmed count of affected people. ## Facts and limits - Daily Dark Web reports a threat actor's claim of more than 7.49 million records associated with CenterPoint Energy customers. Authenticity and the number of distinct people remain unverified. - The claimed fields include contact details, utility-account and billing information, service addresses, driver's-license information, and the last four digits of Social Security numbers. - The reviewed sources do not establish company confirmation of this specific claim, a complete affected-person list, or a verified breach-notification process. ## What is alleged? On September 12, 2026, Daily Dark Web's @DailyDarkWeb account reported that a threat actor claimed to have taken and made available more than 7.49 million records associated with CenterPoint Energy customers. The post is reporting an allegation; it is not a company breach notice or independent validation of the data. The actor reportedly attributed the access to a company-managed application programming interface, or API, and alleged weaknesses in authorization checks and request limits. Daily Dark Web says the claimed access method, data fields, and record count have not been independently verified. The actor's assertion that more data was accessible is also unverified. The reviewed sources do not establish when any unauthorized access began, which systems or customers were involved, whether records are authentic or duplicated, or whether this claim is connected to an earlier incident. A record count may include multiple entries for one person or account. The post also describes threats against infrastructure, which do not establish a successful attack on utility operations or a service outage. ## Timeline - September 12, 2026: Daily Dark Web publishes the allegation. The report describes an actor's claim of more than 7.49 million CenterPoint Energy records and alleged API access, while explicitly noting that the count, access claims, and fields remain unverified. The underlying access dates are not established. ## Alleged data categories The categories below come from the actor's claims as summarized by Daily Dark Web. They have not been independently verified, and the report does not establish that every field appears for every customer. - Identity and contact: Customer names, telephone numbers, and email addresses - Account and location: Utility-account information, service addresses, and billing addresses - Amounts and dates: Current, previous, and total amounts due; billing and payment-due dates - Service history: Move-in dates and rate or service classifications - Billing preferences: Autopay, paperless-billing, and budget-billing status - Government identifiers: Driver's-license information and the last four digits of Social Security numbers The claim concerns the last four digits of Social Security numbers, not confirmed exposure of full SSNs. Autopay status is not the same as a bank-account or payment-card number. The reviewed report does not establish exposure of passwords or complete payment credentials. ## Possible connection Look for records of current or former CenterPoint Energy service, billing, account access, or move-in and move-out requests. These records can document a relationship if the report is substantiated. No account type, service location, or date range has been verified as the complete affected group. Being a CenterPoint Energy customer does not prove that your information was exposed. A suspicious utility message also does not establish a link to this report. Verify any notice through a known account portal or the number printed on an existing bill. - You have current or former service records: Keep bills, account-opening or closing confirmations, and service-address records that name CenterPoint Energy. Former accounts may be relevant, but the report does not establish how far back the claimed records go. - Your bills or account records mention CenterPoint: Check the actual company and account relationship shown in your records. A utility name on a bill is a starting point for review, not proof that a particular account appears in the alleged dataset. - You receive a breach or account-security notice: Preserve the complete email or letter, headers or envelope, received date, and any stated deadlines. Verify the notice independently before using its links or providing personal information. - Someone contacts you about a payment or shutoff: Save the message, caller details, and payment instructions. A caller's knowledge of your address or balance does not authenticate them. Contact the utility using the number on a bill you already trust. ## Who may be affected? The report does not identify a verified affected customer group, service territory, or account date range. Hall Attorneys can review a possible connection and documented harm without assuming that all CenterPoint Energy customers were affected. ## Records to preserve Preserve originals and record when you received each communication. In an initial inquiry, describe what happened without sending complete identity documents, account credentials, or financial records. - Notices and service records: Keep any breach notice, envelope or email headers, bills, service dates, account-opening or closing messages, and move-in or move-out confirmations. - Utility impersonation messages: Save suspicious calls, texts, emails, letters, sender details, payment instructions, and any reference to your service address or balance. - Account changes and payments: Preserve alerts about changed contact details, unfamiliar payment arrangements, disputed charges, or unauthorized activity, along with your reports to the utility or bank. - Time, expenses, and losses: Maintain a dated log of calls and recovery work, receipts, disputed payments, and other concrete effects. Keep copies of any fraud or identity-theft reports. ## Frequently asked questions ### Has the reported CenterPoint Energy data breach been confirmed? The sources reviewed as of September 12, 2026 do not establish company confirmation of this specific claim. Daily Dark Web reports a threat actor's allegation and explicitly says the record count, claimed API access, and data fields have not been independently verified. ### Were 7.49 million CenterPoint Energy customers affected? That has not been established. The actor reportedly claims more than 7.49 million records, not a verified count of distinct people. Records could include duplicates or multiple entries for one customer or account, and their authenticity remains unverified. ### What information is alleged to be in the leak? The report lists names, contact details, utility-account information, service and billing addresses, balances, billing and due dates, move-in dates, billing preferences, service classifications, driver's-license information, and the last four digits of SSNs. These are unverified claims, not confirmed fields for every customer. ### Does the report establish that full SSNs or bank details were exposed? No. The report refers to the last four digits of SSNs and to autopay status. Those descriptions do not establish exposure of full Social Security numbers, bank-account numbers, payment-card numbers, or passwords. The underlying data claims have not been independently verified. ### How can I tell whether my account is involved? The reviewed sources do not provide a verified affected-person list or lookup tool for this alleged incident. Preserve your own service records and any notice, then contact CenterPoint Energy through a known account portal or the number on an existing bill. Being a customer alone does not prove exposure. ### What should I do about a suspicious utility-payment demand? Verify the demand through the number on an existing bill rather than a link or callback number in the message. Do not let a threat of immediate disconnection pressure you into sending money. Preserve the communication and report suspected fraud to the utility and the FTC. If you already paid, contact your payment provider promptly. ### Can a credit freeze help if I am concerned about identity misuse? A credit freeze can help restrict access to your credit report for new-credit applications. The FTC says placing and lifting a freeze is free, and you should contact Equifax, Experian, and TransUnion separately. A freeze does not authenticate utility messages or resolve activity on existing accounts. ### Does the report confirm a power outage or infrastructure compromise? No. The post describes customer-data allegations and an actor's threats against infrastructure. It does not establish a successful attack on operational systems or a resulting power or gas-service disruption. ### Has Hall Attorneys filed a CenterPoint Energy lawsuit? No. This page describes Hall Attorneys' investigation of the reported allegation. It does not announce a filed lawsuit, certified class, settlement, or court finding concerning this report. ## Sources and attribution The incident allegation comes from the September 12 Daily Dark Web post linked below. The FTC resources provide general consumer-protection guidance; they do not confirm a CenterPoint Energy breach. The reviewed sources do not establish company confirmation of this specific claim. - Daily Dark Web (@DailyDarkWeb on X), September 12, 2026: Report of alleged CenterPoint Energy customer-record leak https://x.com/DailyDarkWeb/status/2098841693898330149 Reports the actor's claimed record count, API access, and data categories, and explicitly states that those claims have not been independently verified. - Federal Trade Commission, Accessed September 12, 2026: Scammers Pretend To Be Your Utility Company https://consumer.ftc.gov/articles/scammers-pretend-be-your-utility-company Explains utility impersonation and payment-pressure scams, independent account verification, and reporting options. General guidance, not an incident notice. - Federal Trade Commission, Accessed September 12, 2026: Credit Freezes and Fraud Alerts https://consumer.ftc.gov/articles/credit-freezes-and-fraud-alerts Explains free credit freezes and fraud alerts as tools to help address identity-theft risks. This guidance does not establish exposure in the alleged incident. ## Contact Tell Hall Attorneys whether you are a current or former customer, your service state and approximate dates, whether you received a notice, and any suspicious contact, expense, or loss. Do not include full account numbers, SSNs, driver's-license images, passwords, or payment information in your initial message. Nicholas Hall Hall Attorneys, P.C. nhall@hallattorneys.com +1 713 428 8967 https://hallattorneys.com/connect Attorney advertising. Sending information does not create an attorney-client relationship.