Breaches and incidentsBriefChecked against a primary source
Southern Company utilities (Georgia Power, Alabama Power, Mississippi Power): customer portal data accessed
Alabama Power says it discovered unauthorized access through monitoring affecting a restricted group of account holders.
- Disclosed
What happened
- Alabama Power says it discovered unauthorized access through monitoring affecting a restricted group of account holders: names, mailing addresses, phones, emails, last four digits of SSNs and basic account details; not bank, card or driver’s license numbers. Georgia Power and Mississippi Power accounts were also affected. CBS Atlanta reports about 300,000 Georgia Power customers; Konbriefing cites about 100,000 for Alabama Power.
- Root cause: access via customer online portals per reporting; method (credential stuffing or vulnerability) not described.
- Attacker: not identified.
- Response: contained, law enforcement engaged, notifications by mail and email, one year of Equifax monitoring.
Sources
- https://www.southerncompany.com/miscellaneous-pages/alabama-power-information-regarding-recent-incident-involving-customer-information.html
- https://www.cbsnews.com/atlanta/news/georgia-power-customer-data-may-have-been-accessed-in-data-breach-company-says/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.