CenterPoint Energy reports cyber incident, no service hit

CenterPoint Energy discloses a cybersecurity incident affecting some customer data but expects no material impact on its financial condition or results of operations.

Filing Impact

(High)

Filing Sentiment

(Neutral)

Form Type

8-K

Rhea-AI Filing Summary

CenterPoint Energy, Inc. (CNP) reports a cybersecurity incident after learning in September 2026 of an online post by a third party claiming to possess a customer data set. The company activated its cybersecurity incident response protocols, engaged external cybersecurity experts, and implemented additional protections for its systems.

The company has determined that an unauthorized third party obtained personal information relating to a portion of its customers through an external-facing system, but electric and gas service delivery remains operational and undisrupted. CenterPoint currently does not believe it is reasonably likely there will be a material impact on its financial condition or results of operations.

CenterPoint is working to define the scope of affected customers and data, will notify customers and regulators as required, and has reported the matter to law enforcement. It has incurred and expects to continue to incur expenses related to the incident, and believes its customary cybersecurity insurance coverage will offset related costs.

Insights

Analyzing...

8-K Event Classification

2 items: 8.01, 9.01

2 items

Item 8.01 Other Events Other

Voluntary disclosure of events the company deems important to shareholders but not covered by other items.

Item 9.01 Financial Statements and Exhibits Exhibits

Financial statements, pro forma financial information, or exhibit attachments filed with this report.

Key Figures

Incident awareness date: September 2026 Form 10-K reference year: 2025 Form 10-Q reference quarters: quarters ended March 31, 2026 and June 30, 2026

3 metrics

Incident awareness date September 2026 Month when CenterPoint Energy became aware of the online post about customer data

Form 10-K reference year 2025 Fiscal year of the Annual Report cited for additional risk factors

Form 10-Q reference quarters quarters ended March 31, 2026 and June 30, 2026 Quarterly periods cited for additional risk factor discussion

Key Terms

cybersecurity incident response protocols, personal information, cybersecurity insurance coverage, forward-looking statements, +1 more

5 terms

cybersecurity incident response protocols technical

"the Company promptly took action and activated its cybersecurity incident response protocols"

personal information technical

"obtained personal information relating to a portion of the Company’s customers"

cybersecurity insurance coverage financial

"The Company maintains customary cybersecurity insurance coverage and believes this insurance"

forward-looking statements regulatory

"may contain “forward-looking statements” within the meaning of Section 27A"

Forward-looking statements are predictions or plans that companies share about what they expect to happen in the future, like estimating sales or profits. They matter because they help investors understand a company's outlook, but since they are based on guesses and assumptions, they can sometimes be wrong.

regulatory compliance obligations regulatory

"the extent of regulatory compliance obligations"

FAQ

AI-generated questions and answers. How Rhea-AI works. Not financial advice.

What cybersecurity incident did CenterPoint Energy (CNP) disclose in this Form 8-K?

CenterPoint Energy disclosed that in September 2026 it became aware of an online post by a third party claiming to have a data set with customer information, and an investigation determined an unauthorized third party obtained personal information for a portion of its customers via an external-facing system.

Has the cybersecurity incident affected CenterPoint Energy (CNP)’s electric or gas service?

No. CenterPoint Energy states that its delivery of electric and gas services has not been impacted by the incident and remains operational and undisrupted, while the company investigates the scope of affected customers and information with the help of third-party cybersecurity experts.

Does CenterPoint Energy (CNP) expect a material financial impact from the cybersecurity incident?

As of the date of the report, CenterPoint Energy does not believe it is reasonably likely that the cybersecurity incident will have a material impact on its financial condition or results of operations, although it has incurred and expects to continue incurring expenses related to the incident and its response.

How is CenterPoint Energy (CNP) responding to the cybersecurity incident?

CenterPoint Energy activated its cybersecurity incident response protocols, engaged third-party cybersecurity experts, strengthened protections for its systems, reported the matter to law enforcement, notified certain regulatory authorities, and plans to notify affected customers and regulators as required by applicable law.

Does CenterPoint Energy (CNP) have insurance coverage for this cybersecurity incident?

Yes. CenterPoint Energy states that it maintains customary cybersecurity insurance coverage and believes this insurance will offset costs related to the cybersecurity incident and its response, though the company also notes it has incurred and expects to continue incurring related expenses.

What forward-looking risks does CenterPoint Energy (CNP) highlight regarding the cyber incident?

CenterPoint Energy notes risks related to the timing and nature of remediation expenses, availability of cybersecurity insurance proceeds, the extent of regulatory compliance obligations, and the possibility that the scope of the incident could be greater than initially expected, along with other risks described in its periodic SEC reports.

AI-generated analysis. How Rhea-AI works. Not financial advice.

Understanding 8-K Material Events →

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google

Available on EDGAR 09/14/2026 - 05:17 PM Accepted by SEC EDGAR 09/14/2026 - 05:15 PM

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 8-K

CURRENT REPORT

Pursuant to Section 13 or 15(d)

of the Securities Exchange Act of 1934

Date of Report (Date of earliest event reported): September 14, 2026

	Registrant, State or Other Jurisdiction of Incorporation or Organization
Commission file number	Address of Principal Executive Offices, Zip Code and Telephone Number	I.R.S. Employer Identification No.

1-31447	CenterPoint Energy, Inc.	74-0694415
	(a Texas corporation)
	1111 Louisiana Street

	Houston	Texas	77002
	(713)	207-1111

1-3187	CenterPoint Energy Houston Electric, LLC	22-3865106
	(a Texas limited liability company)
	1111 Louisiana Street

	Houston	Texas	77002
	(713)	207-1111

1-3265	CenterPoint Energy Resources Corp.	76-0511406
	(a Delaware corporation)
	1111 Louisiana Street

	Houston	Texas	77002
	(713)	207-1111

Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions (see General Instruction A.2. below):

Written communications pursuant to Rule 425 under the Securities Act (17 CFR 230.425)

Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12)

Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b))

Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c))

Securities registered pursuant to Section 12(b) of the Act:

Registrants	Title of each class	Trading Symbol(s)	Name of each exchange on which registered

CenterPoint Energy, Inc.	Common Stock, $0.01 par value	CNP	The New York Stock Exchange
CenterPoint Energy, Inc.	Common Stock, $0.01 par value	CNP	NYSE Texas

CenterPoint Energy Houston Electric, LLC	6.95% General Mortgage Bonds due 2033	n/a	The New York Stock Exchange

CenterPoint Energy Resources Corp.	6.625% Senior Notes due 2037	n/a	The New York Stock Exchange

Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (§230.405) or Rule 12b-2 of the Securities Exchange Act of 1934 (§240.12b-2).

Emerging Growth Company ¨

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ¨

Item 8.01 Other Events.

In September 2026, CenterPoint Energy, Inc. (the “Company”) became aware of an online post by a third party claiming to have obtained a data set containing certain of the Company’s customer information. Upon becoming aware of the post, the Company promptly took action and activated its cybersecurity incident response protocols, initiated an investigation with the assistance of third-party cybersecurity experts, and took steps to further protect the Company’s systems.

The Company’s delivery of electric and gas services has not been impacted and remains operational and undisrupted. As of the date of this filing, the Company does not believe it is reasonably likely that there will be a material impact on the Company’s financial condition or results of operations.

While the investigation remains ongoing, the Company has determined that an unauthorized third party obtained personal information relating to a portion of the Company’s customers through one of the Company’s external facing systems (the “Incident”). The Company is continuing to work with third-party experts to determine the scope of customers and personal information affected by the Incident and intends to notify affected customers and regulatory authorities as required by applicable law. The Company reported the matter to law enforcement authorities and has notified certain regulatory authorities of the issue.

The Company has incurred, and expects to continue to incur, certain expenses related to the Incident and its response to the Incident. The Company maintains customary cybersecurity insurance coverage and believes this insurance will offset related costs.

Forward-Looking Statements

This Current Report on Form 8-K (the “Current Report”) may contain “forward-looking statements” within the meaning of Section 27A of the Securities Act and Section 21E of the Exchange Act. All statements other than statements of historical fact included in this Current Report are forward-looking statements made in good faith by us and are intended to qualify for the safe harbor from liability established by the Private Securities Litigation Reform Act of 1995. When used in this Current Report, the words “continue,” “may,” “potential,” “will” or other similar words are intended to identify forward-looking statements. These forward-looking statements are based upon assumptions of management which are believed to be reasonable at the time made and are subject to significant risks and uncertainties. Actual events and results may differ materially from those expressed or implied by these forward-looking statements. The Company assumes no obligation and does not intend to update or revise these forward-looking statements, whether as a result of new information, future events or otherwise, except as required by securities and other applicable laws. Forward-looking statements include, but are not limited to, our expectations regarding any impact on the Company’s financial condition or results of operations, the timing and nature of expenses in connection with the Incident, availability of insurance and potential impact on customers and the Company. Each forward-looking statement contained in this Current Report speaks only as of the date of this report. Important factors that could cause actual results to differ materially from those indicated by the provided forward-looking information include risks and uncertainties relating to (1) the timing and nature of any remediation expenses incurred in connection with the Incident, (2) the availability of cybersecurity insurance proceeds, (3) the extent of regulatory compliance obligations, (4) the risk that the scope of the Incident is greater than initially expected and (5) other factors discussed in the Company’s Annual Report on Form 10-K for the fiscal year ended December 31, 2025, the Company’s Quarterly Reports on Form 10-Q for the quarters ended March 31, 2026 and June 30, 2026 and other reports the Company may file from time to time with the Securities and Exchange Commission.

Item 9.01 Financial Statements and Exhibits.

(d) Exhibits.

Exhibit Number		Exhibit Description
104		Cover Page Interactive Data File - the cover page XBRL tags are embedded within the Inline XBRL document

SIGNATURE

Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized.

		CENTERPOINT ENERGY, INC.

Date: September 14, 2026	By:	/s/ Russell K. Wright
		Russell K. Wright
		Vice President and Chief Accounting Officer


		CENTERPOINT ENERGY HOUSTON ELECTRIC, LLC.

Date: September 14, 2026	By:	/s/ Russell K. Wright
		Russell K. Wright
		Vice President and Chief Accounting Officer


		CENTERPOINT ENERGY RESOURCES CORP.

Date: September 14, 2026	By:	/s/ Russell K. Wright
		Russell K. Wright
		Vice President and Chief Accounting Officer

Source: View Original Filing on SEC EDGAR

Filing Exhibits & Attachments

4 documents

Co-Registrant CIK	0000048732
Co-Registrant Amendment Flag	false
Co-Registrant Form Type	8-K
Co-Registrant DocumentPeriodEndDate	2026-09-14
Co-Registrant Written Communications	false
Co-Registrant Solicitating Materials	false
Co-Registrant PreCommencement Tender Offer	false
Co-Registrant PreCommencement Issuer Tender Offer	false
Co-Registrant Emerging growth company	false

Co-Registrant CIK	0001042773
Co-Registrant Amendment Flag	false
Co-Registrant Form Type	8-K
Co-Registrant DocumentPeriodEndDate	2026-09-14
Co-Registrant Written Communications	false
Co-Registrant Solicitating Materials	false
Co-Registrant PreCommencement Tender Offer	false
Co-Registrant PreCommencement Issuer Tender Offer	false
Co-Registrant Emerging growth company	false

CenterPoint Energy reports cyber incident, no service hit

Rhea-AI Filing Summary

Positive

Negative