What Happened
Southern Company is notifying about 400,000 customers after an unauthorized third party accessed account information through its online customer portal. SecurityWeek reports roughly 300,000 Georgia Power customers and 100,000 Alabama Power accounts are affected. Mississippi Power appears in the public notice with no count.
Exposed data includes names, mailing addresses, phone numbers, email addresses, and the last four digits of Social Security numbers. The company says bank account, payment card, and driver’s license numbers were not accessed. It has not said when the intrusion happened or how the attacker reached the portal. Southern Company engaged law enforcement and offers one year of free credit monitoring.
Why This Matters for Canadian Organizations
Canadian electricity and gas utilities run customer portals with the same design. Provincial and municipal utilities hold names, addresses, contact details, and partial identifiers for millions of households. This data is enough to build convincing phishing messages quoting a real account relationship.
The open question is the entry point. Southern Company has not explained it, so Canadian teams cannot rule out a flaw in the portal itself or the abuse of stolen customer logins. Both paths need checking. Under PIPEDA and provincial privacy law, a utility must report a breach with a real risk of significant harm and notify affected customers. Quebec utilities add Law 25 duties. Utilities are also critical infrastructure, so a portal breach draws regulator attention beyond privacy.
What to Do
Review portal logs for bulk account lookups and repeated login failures. Enforce rate limits and multi-factor authentication on customer accounts. Mask partial government identifiers in portal screens. Rehearse your breach notification steps, including the report to the Office of the Privacy Commissioner. Customers should expect utility-themed phishing, use a unique portal password, and turn on multi-factor authentication when offered. Read our Trends coverage and daily briefs for related incidents.
