Southern Company breach exposed 400,000 customer accounts as a class action lands in Georgia
Southern Company is being priced as the AI boom's power company in the same week a portal breach exposed about 400,000 customer accounts and drew a federal class action. Where the bill lands is a rate-case question, and rate cases are running at record volume.
Vincent Jiang · 2 min read
About 400,000 customers are getting breach notices
An unauthorized third party read the account files of about 400,000 Southern Company+0.01% — Southern Company, up 0.01 percent today customers through its online customer portal, the company disclosed on October 5, 2026. The exposed data: names, mailing addresses, phone numbers, email addresses and the last four digits of Social Security numbers, with no bank account, payment card or driver's license numbers involved. 123
Georgia has a count. Mississippi does not.
About 300,000 of the accounts are Georgia Power's, and roughly 100,000 are Alabama Power's, one in sixteen of its 1.6 million accounts. Mississippi Power is named as affected, with no figure released. Southern has said neither when the intrusion happened nor how the attacker got in, so the liability cannot be sized. 1
The class-action bar moved in three days
A proposed class action landed in Georgia federal court on October 8, accusing the utility holding company of failing to adequately protect hundreds of thousands of customers' personal information. 4 A day later, Edelson Lechtzin opened a nationwide class investigation spanning Georgia Power, Alabama Power and Mississippi Power. 5
The stock is trading on the other story
Southern's shares held around $86 into the weekend, down 0.14%, a $99.10 billion market cap yielding a 3.53% dividend. 6 The week's market commentary framed the stock around surging data-center demand in Georgia and the new reactors whose round-the-clock output pairs with it. 7
The bill goes to a regulator, not just a jury
A regulated utility cannot raise prices unilaterally: every dollar of breach response, credit monitoring and litigation either hits earnings or enters the rate base, where customers repay it with a return. The commissions making that call face a record queue. US utilities filed $18.6 billion of electric and gas rate-increase requests in the first half of 2026, after $31 billion in 2025. 8
Utilities sought $18.6B in rate increases in six months, after a record $31B in 2025
Data
| Rate-increase requests | |
|---|---|
| 2024 | $15B |
| 2025 | $31B |
| 2026 H1 | $18.6B |
Every dollar of this breach gets priced twice: once by a court, once by a regulator deciding who repays it.
What Southern's account leaves out
The company says it took immediate steps on detection, engaged law enforcement and found no evidence of ongoing unauthorized access, and is paying for a year of Equifax credit monitoring. 23910 Missing is what holders need most: when the intruder entered, and through what door. 1
Three markers decide it
The Georgia federal docket, the still-unreleased Mississippi Power count, and any disclosure of timing and method. The megawatts are priced. The liability is not.
Deepdive
AI-generated from this story and its cited sources. Not investment advice.
