From TechRadar · · 1m 20s
CenterPoint Energy confirms major data breach
A US energy utility admits hackers stole 7.5 million customer files through an exposed API.
In brief
A US energy utility admits hackers stole 7.5 million customer files through an exposed API. CenterPoint Energy confirmed a cyberattack exposed millions of customer records including names, SSNs, and billing data, with the company now investigating scope and notifying regulators. Originally reported by TechRadar.
Major US energy company hit by cyberattack
CenterPoint Energy, which serves millions with electricity and natural gas, confirmed hackers compromised its networks and stole customer data through an exposed API.
Hackers claim 7.5 million files stolen
A threat actor posted on a dark web forum claiming they obtained 7.49 million CenterPoint files, including customer names, billing data, driver's license info, and last four digits of Social Security numbers.
Company launches investigation with experts
CenterPoint activated incident response protocols and brought in third-party cybersecurity experts to determine the scope of the breach and which customers were affected.
Operations continue, regulators notified
The cyberattack did not disrupt CenterPoint's electricity and gas delivery operations, which continue normally. Police and regulatory agencies have been notified of the incident.
Customers will be notified of breach
CenterPoint plans to notify all affected customers and regulatory authorities as required by law. The company expects to incur significant expenses from the investigation and response efforts.
“The company is continuing to work with third-party experts to determine the scope of customers and personal information affected by the incident.”
The key point
CenterPoint Energy confirmed a cyberattack exposed millions of customer records including names, SSNs, and billing data, with the company now investigating scope and notifying regulators.
