Southern Company reported that an unauthorized third party accessed information about utility accounts of certain Georgia Power, Alabama Power, and Mississippi Power customers. A company statement cited in the October 2026 ClassAction.org report put the number of affected customer accounts at approximately 400,000. The available report does not state when the breach occurred or when Southern Company discovered it.
Information that may have been exposed included names, addresses, phone numbers, email addresses, the last four digits of Social Security numbers, and other basic account details. Last-four-digit business tax IDs were also reported as potentially exposed. The report said bank account information, payment card numbers, and driver’s license numbers were not affected. It did not give a confirmed count of individuals or a regulator notification date; the company said affected customers would be notified by mail and/or email.
The investigation was described as ongoing in the October 2026 report. Further details, including notification timing and any updated affected count, may emerge as the investigation proceeds.