CenterPoint Energy is facing multiple proposed class action lawsuits after customers alleged a data breach exposed personal information tied to millions of utility accounts. The lawsuits, filed by customers in Texas, Indiana, and Minnesota, claim cybercriminals accessed protected information including names, phone numbers, addresses, billing information, and Social Security numbers. One lawsuit alleges roughly 7 million filtered customer records were leaked, while another claims approximately 6.7 million customers were affected, though CenterPoint has not yet verified that the breach occurred.

The allegations are especially serious because utility companies hold a unique position in everyday life: customers cannot easily “switch away” from power or gas service the way they might leave a retail app or subscription platform. That makes the trust obligation higher. The lawsuits specifically point to CenterPoint’s online account system and guest bill pay feature as a potential weak link, alleging that entering a correct account number could retrieve sensitive personal information. If true, that would turn a convenience feature into a data-exposure pathway, creating risks of identity theft, utility fraud, phishing, account takeover, and targeted scams against households already tied to physical service addresses.

For utilities, the security question is not just whether the grid stayed up — it is whether customer-facing systems, billing portals, APIs, identity workflows, and internal account databases are being monitored with the same seriousness as operational infrastructure. A unified security and observability platform, like NIKSUN, can trace activity across guest pay requests, account lookups, authentication events, billing-system queries, web application logs, database access, endpoint telemetry, DNS, NetFlow/IPFIX, packet capture, and L2–L7 traffic to determine whether records were scraped, which accounts were exposed, and how the attacker moved. By consolidating SIEM, NDR, EDR, XDR, threat intelligence, web application monitoring, forensics, and compliance reporting into one evidence layer, utilities can prove breach scope faster, protect customer trust, and stop a weak public-facing feature from becoming a multi-state class action. Read more about this story on our LinkedIn page