US utilities notify customers after breach affecting around 400,000 accounts
Source dates: Incident reporting appeared on 5 October 2026, with further coverage on 7 October. The company’s public notice displays no publication date.
Event date: Intrusion and discovery dates undisclosed. Recent development.
Southern Company is notifying customers after an unauthorised party accessed information through its online customer portal. Reporting on 7 October put the affected total at approximately 400,000 accounts. The incident had already been reported on 5 October, so today’s coverage should not be mistaken for the date the intrusion happened.
The company’s public notice covers certain customer accounts at Georgia Power, Alabama Power and Mississippi Power in the United States. It says the information accessed included names, mailing addresses, telephone numbers, email addresses, the last four digits of Social Security numbers, or other basic account details. It says bank account numbers, payment-card numbers and driving-licence numbers were not accessed.
The utility says it stopped the activity, involved law enforcement and had found no evidence of continuing unauthorised access. It has not publicly explained the entry method or supplied the intrusion dates. The available evidence concerns customer account information and does not establish that electricity generation or distribution systems were attacked.
Contact information can still matter. It could help someone impersonate a utility provider or create a convincing message about an account. That is a potential consequence, not evidence that every affected customer has received a scam or lost money.
Affected customers are being contacted by post and email and offered one year of free credit monitoring through Equifax. The company recommends unique passwords and regular account reviews. Use its official notice to check contact information if a message is unexpected. For UK readers, the wider lesson is to verify unusual utility-account requests independently before providing information or paying.
Comments