Georgia Power Breach Exposes Data of 400,000 Customers

Key points

• An unauthorized third party accessed the online customer portal of Georgia Power, a subsidiary of Southern Company.
• The breach affected approximately 400,000 accounts, with 300,000 belonging directly to Georgia Power customers.
• Exposed data included names, addresses, phone numbers, emails, and the last four digits of Social Security numbers.
• Georgia Power stated that bank account, payment card, and driver's license numbers were not accessed.
• The company has engaged law enforcement and confirmed no evidence of ongoing unauthorized access.
• Affected customers are being offered one year of free credit monitoring and identity theft restoration services through Equifax.

Background

This incident follows a broader trend of cybersecurity threats targeting critical infrastructure in Georgia. In 2025, the state reported multiple cyberattacks targeting water infrastructure systems, prompting federal warnings about foreign-linked hackers targeting public utilities. While the current incident involves customer account data rather than operational systems, it highlights the persistent vulnerability of utility providers to digital intrusions.

How outlets are covering it

WSB-TV and CBS News both report the breach occurred via the online customer portal, but WSB-TV provides the specific figure of 400,000 affected accounts, while CBS News notes that Georgia Power has not yet publicly confirmed the exact number in response to their inquiry. Both outlets agree that the breach is contained and that law enforcement has been notified. WSB-TV emphasizes the broader context of utility cyberattacks, while CBS News focuses on the specific data points exposed and the company's warning against phishing scams.

Why it matters

The breach affects a significant portion of Georgia's utility customers, exposing sensitive personal information that could be used for identity theft. The incident underscores the ongoing risks associated with digital infrastructure in the energy sector and the importance of robust cybersecurity measures for critical service providers.

What to watch

Georgia Power will continue notifying affected customers and providing free credit monitoring services. The company will work with law enforcement as the investigation proceeds. Customers are advised to monitor their accounts for unusual activity and be cautious of phishing attempts.