CENTERPOINT ENERGY INC

An external-facing system that CenterPoint has not named let an unauthorized party snatch names, service addresses, billing amounts, autopay status, and partial Social Security numbers from at least 6.73 million customers. For thirteen days, the only account of the breach came from the attacker's forum post and five plaintiffs' firms, while the company said nothing. The 8-K calls this not reasonably likely to be material, a clock that starts when the registrant decides it is material, not when the data becomes public property. Materiality is a legal timer; exposure was already two weeks old before Centerpoint filed an 8k and still called it immaterial.