CenterPoint Energy, a major public utility based in Houston, Texas, has reported a significant data breach affecting the personal information of more than one million individuals. This disclosure was made to the Texas Attorney General's Office following a previous notification to the Securities and Exchange Commission (SEC). The breach involved the theft of customer data, including names, addresses, Social Security numbers, and driver's license numbers. Although CenterPoint Energy serves customers in Indiana, Minnesota, and Ohio as well, the full extent of the breach beyond Texas is still uncertain. The breach first came to light after a hacker posted on a cybercrime forum claiming to have accessed approximately 7.5 million records from the utility's systems. Subsequently, a 2.5-gigabyte archive allegedly containing the stolen data, including around 3 million phone numbers, was made available for download online. Despite the magnitude of the breach, CenterPoint Energy has not yet sent notification letters to the affected individuals. The company has indicated that the breach did not affect its operational functions. SecurityWeek has reached out to CenterPoint Energy for further details on the actual number of individuals impacted, awaiting a response for clarification.