If your business or household pays a Georgia Power or Alabama Power bill, expect your inbox and phone to get noisier this month. Southern Company, the parent of both utilities, disclosed on October 5, 2026 that an unauthorized third party got into its online customer portal and accessed limited information on about 400,000 customer accounts.
Alabama Power says bank and card numbers weren't part of it. But the data that was exposed is exactly what scammers need to make a fake "payment problem" call or text sound real.
What the companies have confirmed
- Scope: About 400,000 accounts across Southern Company. Georgia Power says about 300,000 were its customers (WSB-TV, Atlanta News First). AL.com reports about 100,000 Alabama Power customers were notified.
- Data: Names, addresses, phone numbers, email addresses, and basic account information, including the last four digits of some customers' Social Security numbers.
- Not included: Per Alabama Power, the data did not include bank account numbers, payment card numbers, or driver's license numbers.
- Timing: AL.com cites a company recorded line saying the breach happened in September. Public disclosure came October 5.
- Response: The company says it stopped the activity on detection, engaged law enforcement, and has found no evidence of ongoing unauthorized access (WVTM 13). Affected customers are being notified and offered free credit monitoring; AL.com reports a free year of monitoring plus identity theft restoration.
The companies have not named who was behind it or how they got in. Reporting so far points to the customer portal, not the power grid or operational systems.
Why a "limited" breach still matters to small businesses
Name, service address, phone, email, and SSN last four is a ready-made script. A caller who knows your address, your email, and the last four of your Social says "Georgia Power billing, your account is past due and we'll disconnect at 3 p.m. unless you pay now." For a restaurant, a clinic, or a shop floor that cannot lose power on a weekday, that pressure works.
Expect three patterns over the next several weeks:
- Disconnect threats by phone or text demanding immediate payment by card, gift card, or payment app.
- Fake "breach notice" or "credit monitoring" emails that link to look-alike sign-in pages to harvest portal passwords.
- Identity verification pretexts that use your SSN last four to ask for the rest, or for bank details "to issue a refund."
Alabama Power's own scam guidance says it will never ask for immediate payment or personal information like bank or card numbers over the phone or by text.
Clear takeaway
Treat any utility billing contact this month as suspect until verified. Southern Company's portal breach exposed contact details and some SSN last-fours for about 400,000 accounts, which is exactly what bill-payment phishing needs. Verify through the official app or website, change portal passwords, and enroll in the free monitoring if you're notified.
Actions to take this week
- Brief whoever answers the phone and pays the bills. Front desk, office manager, bookkeeper: no utility payment goes out from an inbound call, text, or email link. Hang up and call the number on your bill or in the official app.
- Change your utility portal password and any other account where you reused it. Turn on multifactor sign-in where the portal offers it.
- Enroll in the free credit monitoring if you get a notice, but sign up through the link or code in the official letter, not from an unsolicited email.
- Verify only through official channels: georgiapower.com, alabamapower.com, or the official mobile apps. Alabama Power lists 1-800-245-2244 (residential) and 1-888-430-5787 (business) as its only customer service numbers.
- Tighten email filtering for utility look-alikes. If you manage Microsoft 365 or Google Workspace, flag external mail using utility names and confirm impersonation protection is on.
- Consider a credit freeze for owners whose SSN last four may be exposed. It's free and doesn't affect your score.
Brotherly Technology helps small businesses across Rome, Northwest Georgia, and the Alabama line turn headlines like this into a short staff briefing and a quick check of email filtering and sign-in protections. If a "Georgia Power" call has your team second-guessing, that's a good time to run it.
Sources:
- WSB-TV, Scott Flynn, October 5, 2026: 400K accounts, 300K Georgia Power; names, addresses, phones, emails, SSN last four; law enforcement; credit monitoring.
- Atlanta News First, October 5, 2026: about 300,000 Georgia Power accounts within about 400,000 total; no continued access.
- AL.com, October 2026: about 100,000 Alabama Power customers notified; September timing per recorded line; no bank, card, or driver's license numbers; free year of monitoring and restoration.
- WVTM 13, October 5, 2026: Southern Company statement; activity stopped; law enforcement; no ongoing access.