Southern Company Data Breach Investigation

Pittman, Dutton, Hellums, Bradley & Mann, P.C. is investigating a reported data security incident involving Southern Company after the company stated that an unauthorized third party accessed limited information through its online customer portal.

According to public reports, the incident impacted approximately 400,000 Southern Company electric customers across the Southeast. Southern Company is the parent company of several utility providers, including Alabama Power, Georgia Power, and Mississippi Power.

Customers who received a notice from Southern Company or one of its utility providers should carefully review the notice and take steps to protect their information. Depending on the circumstances, affected customers may have legal rights.

‍

What Happened In This Data Breach?

Southern Company reportedly detected suspicious activity involving its online customer portal. The company stated that an unauthorized third party accessed certain limited customer account information.

The incident reportedly impacted approximately 400,000 electric customers across the Southeast. Public reports state that approximately 100,000 of those affected customers were Alabama Power customers.

Southern Company stated that it stopped the suspicious activity and has not found evidence of ongoing unauthorized access. The company also reported that it is working with law enforcement and notifying affected customers.

‍

What Information Was Involved?

The information involved may differ by customer. Based on public reports, the information potentially accessed may have included:

• Names
• Addresses
• Phone numbers
• Email addresses
• The last four digits of Social Security numbers
• The last four digits of business tax identification numbers
• Other basic account details

Southern Company reportedly stated that the incident did not involve full Social Security numbers, bank account numbers, credit card numbers, debit card numbers, or driver’s license numbers.

Even though the company has described the information as limited, account information and contact details can still create risk for affected customers. Criminals may use this type of information to create convincing phishing emails, scam calls, fraudulent payment requests, or account impersonation attempts.

‍

How Is Southern Company Responding?

Southern Company stated that it stopped the unauthorized activity after it was detected. The company also said it is working with law enforcement and notifying affected customers.

Affected customers are reportedly being offered free credit monitoring. Customers who receive a notice should review the enrollment instructions carefully and decide whether to use the services being offered.

At this time, Southern Company has reportedly stated that it has not found evidence of ongoing unauthorized access.

‍

Why This Incident Matters

Southern Company and its utility providers maintain customer account information for electric customers across the Southeast. Even when a reported incident does not involve full Social Security numbers, payment card numbers, or bank account numbers, exposed account details can still be misused.

Scammers may use customer information to impersonate Southern Company or a local utility provider. They may attempt to convince customers to make payments, provide login credentials, confirm personal details, or click malicious links.

Customers should be especially cautious of urgent messages threatening disconnection, demanding immediate payment, or asking for sensitive information.

‍

What Should Affected Customers Do?

If you received a data security notice from Southern Company, Alabama Power, Georgia Power, Mississippi Power, or another Southern Company utility provider, you should read the notice carefully.

Affected customers may want to monitor financial accounts, review credit reports, watch for unfamiliar account activity, and remain cautious of unexpected calls, emails, or text messages.

You may also want to consider placing a fraud alert or credit freeze with the major credit reporting agencies. These steps may help reduce the risk of unauthorized accounts being opened in your name.

You should also save a copy of your notice and keep records of any suspicious communications, time spent responding to the incident, out-of-pocket expenses, or identity theft issues that may be connected to the breach.

‍

Contact Our Data Breach Attorneys

Companies that collect and maintain customer information are expected to use reasonable safeguards to protect that information. When customer information is accessed without authorization, affected individuals may have legal claims depending on the facts of the incident, the information involved, and any resulting harm.

Pittman, Dutton, Hellums, Bradley & Mann, P.C. is investigating the Southern Company data security incident and evaluating potential claims on behalf of affected customers.

If you received a data breach notification from Southern Company or one of its utility providers, call (205) 322-8880 today for a free consultation.

There are no upfront costs, and you pay nothing unless we recover compensation on your behalf.

‍