Supply chain ⛓ Supply Chain

CenterPoint Energy Third-Party Breach (January 2025)

📅 2025-01-01 🏢 Third-party vendor
Primary Source ↗

Incident Details

Texas utility firm investigating potential leak of customer data tied to 2023 MOVEit breach. A large Texas energy company confirmed it is investigating reports of stolen customer data that has been published on a cybercriminal forum after it was allegedly taken during a 2023 breach. CenterPoint Energy told Recorded Future News that it is aware of reports that customer data has been leaked after researchers uncovered a cybercriminal forum post with the information. “Based on our investigation, we believe this data was obtained from a third-party vendor’s system,” a spokesperson for CenterPoint Energy said. “We have no reason to believe that our network was compromised in connection with this issue.”.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Third-party vendor
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2025-01-01 Breach occurred
  2. 2025-01-28 Publicly disclosed