A dataset containing 6,734,894 customer records from CenterPoint Energy is now available for download after a threat actor using the handle Hex_4d722e4d656f77 leaked the information on a cybercrime forum. The 48.8 GiB extraction from August 21, 2026, includes customer names, phone numbers, billing addresses, driver's license numbers, and the last four digits of Social Security numbers for users in Texas and Minnesota.

The theft occurred through an unprotected public API that allowed the attacker to enumerate customer account numbers by cycling through identifiers. CenterPoint Energy confirmed the breach and filed a regulatory report stating that gas and electric delivery remained operational and that the incident is not reasonably likely to result in a material financial impact. The actor claims that CAPTCHA enforcement eventually stopped the data collection.