Supply chain
⛓ Supply Chain
CenterPoint Energy Third-Party Breach (January 2025)
Primary Source ↗Incident Details
Texas utility firm investigating potential leak of customer data tied to 2023 MOVEit breach. A large Texas energy company confirmed it is investigating reports of stolen customer data that has been published on a cybercriminal forum after it was allegedly taken during a 2023 breach. CenterPoint Energy told Recorded Future News that it is aware of reports that customer data has been leaked after researchers uncovered a cybercriminal forum post with the information. “Based on our investigation, we believe this data was obtained from a third-party vendor’s system,” a spokesperson for CenterPoint Energy said. “We have no reason to believe that our network was compromised in connection with this issue.”.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Third-party vendor
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2025-01-01 Breach occurred
- 2025-01-28 Publicly disclosed