Alabama Power Data Breach Investigation

Pittman, Dutton, Hellums, Bradley & Mann, P.C. is investigating a reported data security incident involving Alabama Power and its parent company, Southern Company, after certain customers were notified that information associated with their online customer portal accounts may have been accessed by an unauthorized third party.

According to public reports, Alabama Power notified some customers that unauthorized activity was detected involving an online customer portal. The incident may have affected approximately 100,000 Alabama Power customers and approximately 400,000 Southern Company customers overall.

Individuals who received a notice from Alabama Power or Southern Company should carefully review the notice and take steps to protect their information. Depending on the facts, affected customers may have legal rights.

‍

What Happened In This Data Breach?

Alabama Power reportedly notified certain customers that an unauthorized third party accessed limited customer information through an online customer portal.

Southern Company, which is the parent company of Alabama Power, Georgia Power, and Mississippi Power, stated that it recently detected suspicious activity involving its online customer portal. According to Southern Company, an unauthorized third party accessed certain limited information associated with approximately 400,000 customer accounts.

A recorded message reportedly stated that the incident occurred in September. After detecting the activity, Southern Company said it took steps to stop the unauthorized access, began an investigation, and contacted law enforcement.

At this time, the exact number of Alabama Power customers affected has not been publicly confirmed.

‍

What Information Was Involved?

The information involved may vary by customer. Based on public reports, the information potentially accessed may have included:

• Names
• Addresses
• Phone numbers
• Email addresses
• Basic account information
• The last four digits of some customers’ Social Security numbers

‍

According to Alabama Power, the information involved did not include bank account numbers, payment card numbers, or driver’s license numbers.

Although the reported information appears to be limited, customer names, contact information, account details, and partial Social Security numbers may still be misused in phishing attempts, impersonation scams, account-related fraud, or efforts to obtain additional personal information.

‍

How Is Alabama Power Responding?

Southern Company stated that it took steps to stop the unauthorized activity after it was detected. The company also stated that it contacted law enforcement and is continuing to investigate the incident.

According to public reports, Southern Company has not identified evidence of ongoing unauthorized access at this time.

Affected customers are reportedly being notified and offered one year of complimentary credit monitoring and identity theft restoration services.

‍

Why This Incident Matters

Utility companies maintain customer information that may be used to access accounts, verify identities, or communicate with customers. Even when a reported incident does not involve full Social Security numbers, bank account numbers, or payment card numbers, exposed account information can still create risk.

Scammers may use customer information to send emails, text messages, or phone calls that appear to come from Alabama Power, Southern Company, or another trusted source. These communications may ask customers to verify account information, make a payment, click a link, or provide additional personal details.

Customers who receive notice of this incident should remain alert and monitor for suspicious communications or account activity.

‍

What Should Affected Customers Do?

If you received a data security notice from Alabama Power or Southern Company, you should read the notice carefully and follow the instructions provided.

Affected customers may want to monitor financial accounts, review credit reports, watch for unfamiliar activity, and be cautious of unexpected calls, texts, or emails claiming to be from Alabama Power or Southern Company.

You may also want to consider placing a fraud alert or credit freeze with the major credit reporting agencies. A credit freeze can help reduce the risk of new credit accounts being opened in your name without your authorization.

You should also keep a copy of your data breach notice and save records of any time spent, expenses incurred, suspicious activity, or identity theft issues that may be connected to the incident.

‍

Contact Our Data Breach Attorneys

Companies that collect and maintain customer information are expected to use reasonable safeguards to protect that information. When customer information is accessed without authorization, affected individuals may have legal claims depending on the facts of the incident, the information involved, and any resulting harm.

Pittman, Dutton, Hellums, Bradley & Mann, P.C. is investigating the Alabama Power and Southern Company data security incident and evaluating potential claims on behalf of affected customers.

If you received a data breach notification from Alabama Power or Southern Company, call (205) 322-8880 today for a free consultation.

There are no upfront costs, and you pay nothing unless we recover compensation on your behalf.