CenterPoint Energy Data Breach: What Was Exposed and What to Do

Your utility just became your exposure

CenterPoint Energy has confirmed a data breach affecting its customers. An attacker accessed customer information through an external-facing system, and a hacker has claimed roughly 7.49 million records were taken — though CenterPoint's own SEC disclosure does not confirm that figure or the exact fields involved. The numbers come from the attacker's listing and the first class-action lawsuits.

Based on that listing, the exposed data reportedly includes:

• Full names
• Phone numbers and email addresses
• Service and billing addresses
• Account and premise identifiers, billing details
• The last four digits of Social Security numbers

Why a utility breach is worse than it looks

Your electricity never went out, so this doesn't feel like an emergency. That's exactly why it's dangerous. The most valuable thing in this dataset isn't a password — it's the pairing of your name, home address, and phone number.

That combination is the raw material of the data-broker economy. People-search sites buy, assemble, and resell exactly this kind of record, and a fresh breach gives them new, accurate data to publish. Once your address is tied to your name across broker sites, it fuels spam calls, phishing, and package fraud.

What you can actually do

You can't fix CenterPoint's security. You can control how findable you are afterward:

• See what's already public. Search your own name plus your city. If your address and phone show up on people-search sites, anyone can find them.
• Get your listings removed. Data brokers must honor opt-out requests — the problem is there are hundreds of them.
• Keep them removed. Brokers re-list; ongoing monitoring is what keeps your data gone.

GhostMyData scans the data-broker network for your information, removes it, and keeps it removed — automatically. Run a free scan to see where your name and address are exposed today.

Sources: The Register, Houston Chronicle, ABC13, CenterPoint SEC Form 8-K.