INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Georgia Power and Alabama Power Data Breach Exposes 400,000 Accounts

| 2026-10-07 14:15 CRITICAL HIGH DATA BREACH
JSON
Executive Summary
AI-generated
On October 7, 2026, a data breach occurred at Southern Company's online customer portal, affecting approximately 400,000 accounts across Georgia Power and Alabama Power. The incident involved unauthorized access to limited information about the affected customers' names, mailing addresses, phone numbers, email, or Social Security Numbers, but not bank account numbers, payment card numbers, or driver's license numbers. Roughly 300,000 of these accounts belong to Georgia Power customers, while around 100,000 Alabama Power accounts were also impacted. Mississippi Power is also affected, although no figure has been released for its customers. The breach occurred through the online customer portal and was discovered upon detection by Southern Company.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
GE
energyenergy
Incident Timeline
‎2026/10/07
Threat actors accessed certain, limited information about the accounts of approximately 400K customers through Southern Company's online customer portal.
organisation Georgia Power
Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts.
organisation Alabama Power Data Breach Hits
Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts.
organisation Alabama Power
Its electric subsidiaries are Georgia Power, Alabama Power and Mississippi Power.
organisation Mississippi Power
Its electric subsidiaries are Georgia Power, Alabama Power and Mississippi Power.
organisation Southern Company
Southern Company is notifying roughly 400,000 customers that their utility account information was accessed by an unauthorized third party through its online customer portal.
victims 400,000 customers
Southern Company is notifying roughly 400,000 customers that their utility account information was accessed by an unauthorized third party through its online customer portal.
“An unauthorized third party accessed certain, limited information about the accounts of approximately 400K customers.
organisation Alabama Power’s
According to Southern Company, the incident also impacted roughly 100,000 of Alabama Power’s 1.6 million accounts.
organisation Southern Company’s
Southern Company’s public notice specifies the type of data involved.
organisation Social Security Number
“Based on our investigation to date, the limited customer account information that the unauthorized party gained access to includes the customer’s name, mailing address, phone number, email, or the last 4 digits of their Social Security Number, and other basic account details,” the notice reads.
victims 9 customers
The Atlanta-based energy holding company serves more than 9 million customers through electric utilities in three states and natural gas distribution businesses in four.
Tactical Metrics
Metrics
victims
400,000
Customers
Southern Company is notifying roughly 400,000 customers that their utility account information was accessed by an unauthorized third party through its online customer portal.
“An unauthorized third party accessed certain, limited information about the accounts of approximately 400K customers.
Metrics
victims
9,000,000
Customers
The Atlanta-based energy holding company serves more than 9 million customers through electric utilities in three states and natural gas distribution businesses in four.
Intelligence Sources
SecurityWeek 2026-10-07