Alabama Power Data Breach Exposes 100,000 Customers: What Was Taken and How to Protect Yourself

Photo via Wikimedia Commons

About 400,000 utility customers received unsettling news this week: an unknown intruder slipped into their online accounts in a data breach first reported in October 2026.

What happened

Southern Company, the parent firm behind utilities across the Southeast, says an unauthorized party accessed customer accounts through its online customer portal. Roughly 300,000 Georgia Power accounts and 100,000 Alabama Power accounts were caught up in the incident, and Mississippi Power customers were named as well. The company has not disclosed when the intrusion took place or how the attacker got in.

What information was exposed

The customer data that may have been exposed includes names, home addresses, phone numbers, email addresses, and the last four digits of Social Security numbers. Southern Company says bank account numbers, payment card numbers, and driver's license numbers were not accessed. The company is offering affected customers one year of free credit monitoring.

What to watch for now

Here is the consumer alert angle: with names, phone numbers, and email addresses in the wrong hands, customers should watch for follow-up phishing calls, texts, and emails pretending to come from their power company. This phishing warning matters because a utility scam often begins with a fake urgent message pressuring you to pay immediately or hand over personal details. Your real utility will never demand instant payment or sensitive information by phone. If a message feels off, hang up and call the number printed on your bill, and keep an eye on your credit reports to guard against identity theft.