CenterPoint Energy confirms customer data stolen in breach

Wed, 16 Sep 2026 15:25:29 +0000

Engineer — Skip
SOC/IR — Learn: No IOCs or TTPs disclosed; breach at a US utility with confirmed data exfiltration may be worth monitoring for follow-on phishing campaigns using stolen customer data.
Leader — Act: If CenterPoint Energy is a vendor or partner, request their incident report and confirm what data was exposed; utility-sector breaches increasingly draw board and regulatory attention, so brief leadership before this surfaces externally.

Utility-Sector on CuraSec