CenterPoint Energy
Houston-based US electricity and natural gas utility.
CenterPoint Energy told US securities regulators on 14 September 2026 that an unauthorised party took personal information on some customers through an external-facing system, and filed it as a voluntary disclosure rather than a material incident.
Last refreshed: 12 October 2026 · Appears in 1 active topic
Why did CenterPoint call a customer data theft not material?
Timeline for CenterPoint Energy
Disclosed a customer-data breach under Item 8.01
Cybersecurity: Threats and Defences: Astrana Health files 8-K over phone spoofBackground
CenterPoint Energy is a Houston-based utility that delivers electricity and natural gas to customers in the United States. Its cyber profile rests on one disclosure: an Item 8.01 8-K dated 14 September 2026, which said an unauthorised party obtained personal information on some customers through one of its external-facing systems.
The filing followed a third party's online claim in September 2026 to hold a CenterPoint customer data set. The company gave no customer count and named no data types. It said electric and gas delivery were unaffected, that it had reported the incident to law enforcement and certain regulators, that a material impact is not reasonably likely, and that it expects insurance to offset costs.
CenterPoint's choice of Item 8.01 signals its own view of the breach: the SEC keeps Item 1.05 for cyber incidents the filer considers material, and 8.01 carries no such admission. CenterPoint was one of three September filers to take the voluntary route, alongside Veradigm and Conduent, while Astrana Health and Boston Scientific declared material incidents.
