Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts

Southern Company reported that hackers accessed limited customer account information for roughly 400,000 accounts through its online customer portal. The affected accounts include approximately 300,000 Georgia Power customers and 100,000 Alabama Power customers; Mississippi Power was also affected but no specific number was provided. The data accessed includes customer names, mailing addresses, phone numbers, email addresses, last four digits of Social Security numbers, and other basic account details. The breach did not expose bank account numbers, payment card numbers, or driver’s license numbers. The company took immediate action to stop the unauthorized access and has involved law enforcement. Impacted customers are being notified and offered credit monitoring services. The exact method and timing of the breach have not been disclosed.

The breach exposed personally identifiable information (PII) of approximately 400,000 utility customers, including names, contact information, and partial Social Security numbers. While financial account details and driver’s license numbers were not accessed, the exposed data could facilitate identity theft or targeted phishing attacks. The breach affects customer privacy and may erode trust in Southern Company's data security practices. The company’s prompt response and credit monitoring offer mitigate some potential harm.

Southern Company has already taken immediate steps to stop the unauthorized access and engaged law enforcement. Affected customers have been notified and offered one year of free credit monitoring. No additional mitigation actions are specified or recommended at this time. Customers should remain vigilant for phishing attempts or suspicious communications.