The CenterPoint breach exposed partial Social Security numbers

Assessment

The claim that the stolen data included the last four digits of Social Security numbers, alongside names, contact details, account identifiers and billing information, is drawn from the threat actor's own description of the dataset, as relayed by CyberInsider and Security Affairs. CenterPoint's 8-K does not enumerate the affected data fields at all, stating only that 'personal information' was obtained and that the investigation is still determining what was accessed. Because SSN exposure drives regulatory notification obligations and consumer harm, treating this attacker-sourced detail as confirmed overstates what CenterPoint has actually acknowledged.