Sep 12, 2026, 01:34 PM
This thread post is covering CenterPointEnergy Data BREACH. We've obtained well over 7.49 Million, each single one line which converts to 7 files in total of (.jsonl) format, which upholds per line 1 user, and we've obtained well over 7.49 million lines. As for the (CSV), we've filtered long text from (Jsonl), so the CSV will uphold the full PII (personal identity information).
It's quite funny to think a $26.2 billion company has WEAK protection. We obtained said data from an API they managed and controlled, which lacked proper WAF protection, rate limiting, certification protection, and no JWT/Auth token to pull said data. Mid the 7.49 million mark, they did an attempt to stop us dumping data, which, with a simple CAPTCHA key, in terms, we would have pulled 17.44 million data from said company.
This goes to CenterPointEnergy. We'll be waiting, and I highly expect you as a company to be worth so much to have proper protection regarding your users. Next time we wont to simply pull data, we'll start attacking the main infrastructure.
Fields in said data: account,accountWithCheckDigit,holderName,firstName,lastName,phone,bpAddress,serviceStreet,serviceHouse,
serviceCity,serviceState,serviceZip,billingStreet,billingCity,billingState,billingZip,contract,premiseID,revClass,
serviceArea,totalAmountDue,pastDueAmount,currentBillAmount,dueDate,lastBillDate,moveInDate,isAutopayEnrolled,isPaperless,
isBudgetBilling,rateClass,email,dlNo,lastFourSSN
Download full 7.49 Million files
https://drive.google.com/file/d/1V-ACqhs...FL_Rf/view
It's quite funny to think a $26.2 billion company has WEAK protection. We obtained said data from an API they managed and controlled, which lacked proper WAF protection, rate limiting, certification protection, and no JWT/Auth token to pull said data. Mid the 7.49 million mark, they did an attempt to stop us dumping data, which, with a simple CAPTCHA key, in terms, we would have pulled 17.44 million data from said company.
This goes to CenterPointEnergy. We'll be waiting, and I highly expect you as a company to be worth so much to have proper protection regarding your users. Next time we wont to simply pull data, we'll start attacking the main infrastructure.
Fields in said data: account,accountWithCheckDigit,holderName,firstName,lastName,phone,bpAddress,serviceStreet,serviceHouse,
serviceCity,serviceState,serviceZip,billingStreet,billingCity,billingState,billingZip,contract,premiseID,revClass,
serviceArea,totalAmountDue,pastDueAmount,currentBillAmount,dueDate,lastBillDate,moveInDate,isAutopayEnrolled,isPaperless,
isBudgetBilling,rateClass,email,dlNo,lastFourSSN
Download full 7.49 Million files
https://drive.google.com/file/d/1V-ACqhs...FL_Rf/view