Southern Company: an unauthorised party reached the account details of about 400,000 Georgia Power, Alabama Power and Mississippi Power customers through the online customer portal
US energy group Southern Company is notifying roughly 400,000 utility customers that an unauthorised third party accessed their account information through its online customer portal, SecurityWeek reported on 7 October 2026. About 300,000 of the accounts belong to Georgia Power customers and about 100,000 to Alabama Power; Mississippi Power is named in the company's notice but no number has been given for it. The notice says the information reached was name, mailing address, phone number, email address or the last four digits of the US Social Security number, plus other basic account details, and that bank account numbers, payment card numbers and driver's licence numbers were not accessed. The company says it found the activity through its own monitoring, stopped it, brought in law enforcement and has found no sign of ongoing access. It has not said when the intrusion happened or how the attacker got into the portal. Affected customers are being told by email or letter and offered a year of Equifax credit monitoring. No Australian customers are involved. Primary: Southern Company / Georgia Power customer notice; wire: SecurityWeek.
- Product
- Southern Company online customer portal (Georgia Power, Alabama Power, Mississippi Power)
- Versions
- n/a
- Exploited in Australia?
- unknown
- Patch to
- Affected customers should enrol in the offered monitoring and expect phishing that quotes real account details. For utilities and other portal operators: watch for bulk account lookups from single sessions, rate-limit account search and profile endpoints, and check that every portal request is authorised for the specific account it touches.
Primary: Southern Company — Information regarding a recent incident involving customer information (customer notice; date not shown on page) · Vendor: SecurityWeek — Georgia Power, Alabama Power data breach hits 400,000 accounts (7 Oct 2026)