CenterPoint Breach Reaches 1,062,060 Texans
Texas’s breach register lists 1,062,060 Texans for CenterPoint Energy, with names, addresses, Social Security number information and driver’s licence numbers among the affected data.
That is a state count, not a national total or proof that every category applies to every person.
Two records, two different answers
The row was published on 13 October. Checked on 16 October, it still showed “No” for consumer notice and no method. This is a dated register field, not proof that nobody has been contacted or a finding of unlawful conduct.
CenterPoint’s 14 September filing said an unauthorised third party obtained customer information through an external-facing system. After learning of an online claim, it activated its response, engaged outside experts and contacted law enforcement.
At that filing date, the company said electricity and gas delivery was undisrupted, its scope investigation continued and it intended to notify as required. These are September statements, not a current independent all-clear. Neither record establishes an attacker, initial access method or access dates.
Service continuity and customer-data exposure answer different questions. Equally, an intention to notify does not establish a completed notification programme. The useful next answer is individual: which fields, from what period, and what assistance is available?
Match the response to the identifier
The Federal Trade Commission says a credit freeze helps stop new credit accounts being opened in your name. Placing and lifting one is free, does not affect your credit score and requires contacting Equifax, Experian and TransUnion separately. A fraud alert instead tells lenders to verify identity; an initial alert can be placed through one bureau, which must tell the other two.
That distinction matters: a freeze is a new-credit control, not erasure of exposed information or authentication of a caller. Review credit reports for unfamiliar accounts or enquiries. If identity misuse appears, IdentityTheft.gov provides reporting and a personal recovery plan.
For a claimed utility notice, use the company’s official contact route, opened independently, or details already held on a bill. Do not treat a familiar address or a purported disconnection deadline as proof of the sender’s authority.
Keep an unfinished answer visible
BlackTree proposes a short record for the customer’s follow-up. Keep the date of the purported notice, the question asked, the response received and any promised next answer together. The record should make an unanswered question easy to see, rather than treating one telephone conversation as the end of the matter.
For the organisation answering, assign the enquiry to a named owner. Separate an explanation of the incident from any request for documents or payment. If an explanation cannot yet be given, record what remains unknown and when the customer will hear again. That is a proposed service process, not a claim about CenterPoint’s existing procedures or a legal deadline.
