Overview
- CenterPoint opened an investigation after an online post claimed a third party had obtained a dataset of customer information and it engaged outside cybersecurity experts.
- The company concluded the unauthorized access occurred through an external-facing system and that some customers’ personal information was obtained.
- CenterPoint reported the incident to law enforcement and regulatory authorities and disclosed the matter in an SEC filing.
- The utility has not revealed how many customers were affected or which data types were exposed and it says it will notify impacted customers as required by law.
- CenterPoint says electric and natural gas services were not disrupted, it does not expect a material financial or operational impact, and customers have already filed proposed class actions alleging inadequate security.