Energy holding company Southern Company reported a security incident where an unauthorized third party accessed utility account details for roughly 400,000 customers through its online customer portal. The breach impacts roughly 300,000 Georgia Power customers and about 100,000 Alabama Power accounts, with Mississippi Power also affected (though exact numbers for Mississippi were not immediately disclosed). Compromised information includes customer names, mailing addresses, phone numbers, email addresses, the last 4 digits of Social Security Numbers, and other basic account details. Critical financial details like bank accounts, payment cards, and driver’s license numbers were not accessed. Southern Company stopped the unauthorized activity, notified law enforcement, and is providing impacted customers with notification letters/emails alongside a year of free credit monitoring.

Full report : Southern Company operating in Alabama and Georgia is notifying customers that their utility account information was accessed by hackers.