Texas Utility Discloses Customer Data Breach in SEC Filing

CenterPoint Energy CNP.N said in an SEC filing on Monday that the company had become aware in September of an online post by a third party claiming to have obtained a dataset of information on some of its customers.

The Texas-based utility said it activated its cybersecurity incident response protocols and enlisted third-party cybersecurity experts after learning of the post, while also taking steps to further protect its systems.

The company said its investigation determined that an unauthorized third party obtained personal information relating to a portion of its customers through one of its external-facing systems.

CenterPoint said its electric and gas services have not been affected and remain operational, and it does not currently believe the incident is reasonably likely to have a material impact on its financial condition or the results of its operations.

It has incurred and expects to continue incurring expenses tied to the incident and its response, the utility said, adding that it carries cybersecurity insurance it believes will offset related costs.

“Our filing speaks for itself,” a CenterPoint Energy spokesperson said on Tuesday when Reuters reached out to the company with a request for comment.

(Reporting by Dharna Bafna and Pooja Menon in Bengaluru; Editing by Tasim Zahid and Pooja Desai)