Data Breach Hits Operator of South Texas Nuclear Power Plant - GovTech
A data breach has affected the operator of South Texas nuclear power plant, compromising personal information of nearly 1,200 Texans.
The breach was disclosed by STP Nuclear Operating Co., which runs the South Texas Project Electric Generating Station near Bay City. The nonprofit partially owned by CPS Energy and Austin Energy notified the state attorney general's office about the incident affecting approximately 1,200 individuals.
Compromised data includes names, Social Security numbers, birthdates and other personal information. Affected Texans were notified via email, though the notice did not specify whether the plant's operating or safety systems were impacted.
Safety Assurances
A Nuclear Regulatory Commission spokeswoman confirmed the agency "remains satisfied that the South Texas Project plant continues operating safely and securely in accordance with agency requirements." The facility, with two reactors capable of powering 2 million homes, has experienced previous "unusual events" in October 2025 and July 2024.
remains satisfied that the South Texas Project plant continues operating safely and securely in accordance with agency requirements
Limited Information
CPS Energy, Austin Energy, Constellation South Texas LLC and STP have not responded to inquiries about the breach's cause, their response, or the full extent of those affected. Texas law requires organizations to report breaches affecting 250+ individuals to the attorney general within 30 days of discovery.
Critical infrastructure operators like STP must report certain cyber incidents to the Texas Cyber Command, which has not commented on the breach. The attorney general's website currently lists 686 breach notices, with 573 filed this year.
Related
