An unauthorized third party accessed personal information of a portion of CenterPoint Energy customers through one of the utility's external facing systems in September 2026. The company identified the incident after a third party posted a claim online regarding a data set containing customer information, which triggered the activation of internal cybersecurity response protocols. Delivery of electric and gas services remained operational and undisrupted during the event.

A form 8 K filing states that the company does not believe the incident will have a material impact on its financial condition or results of operations. CenterPoint has engaged third party cybersecurity experts to determine the scope of the affected data and has reported the breach to law enforcement and regulatory authorities. The utility believes its customary cybersecurity insurance will offset expenses incurred in the response.