CenterPoint Energy has notified Texan authorities that the personal information of over 1 million individuals was compromised in a data breach.
The notice came one month after the Houston-based public utility told the SEC that customer information had been stolen from its systems.
Just days before its initial disclosure, a hacker boasted on a known cybercrime forum that it had obtained nearly 7.5 million user records from CenterPoint Energy.
In its SEC filing, the company confirmed it learned of the data breach after the threat actor’s public post, noting that only a portion of its customers had been affected and that the incident did not impact its operations.
This week, CenterPoint Energy told the Texas Attorney General’s Office that 1,062,060 state residents were affected. It appears that the utility has not sent notification letters to the impacted individuals.
According to the company’s filing, the compromised information includes names, addresses, Social Security numbers, and driver’s license numbers.