Customers of Georgia Power, Alabama Power, and Mississippi Power whose account information was accessed could ask Edelson Lechtzin about a potential class action. The firm says the group is customers who receive a breach notice tied to the incident. A class-action investigation screens possible plaintiffs before any lawsuit is filed. Southern Company disclosed October 5, 2026 that an unauthorized third party accessed limited account information through its online customer portal, according to TEISS in TEISS's October 15 report.
Official resource:
- Explore the official data from Globenewswire — Use this primary source to review the underlying data.
Table of Contents
- Do you fit the group Edelson described?
- What information was involved?
- What stayed out of the incident?
- What does joining mean right now?
- What should notice recipients do next?
Do you fit the group Edelson described?
Edelson Lechtzin said it is reviewing data-privacy claims for customers of Georgia Power, Alabama Power, and Mississippi Power, according to the firm via GlobeNewswire in the firm's October 9 announcement. The key link is access plus notice.
You need both utility-customer status and inclusion in the portal incident. Use this quick check: The released breakdown covers about 300,000 Georgia Power accounts and 100,000 Alabama Power accounts. Keep the notice because it ties you to the affected group.
- You held a Georgia Power, Alabama Power, or Mississippi Power account that used the online portal.
- Your account information was accessed in the incident.
- You received a breach notice by mail or email.
What information was involved?
The exposed data varied by person. It could include name, mailing address, phone, email, last four digits of Social Security number, last four digits of business tax ID, plus basic account details.
That mix can support targeted phishing even without full identifiers. A name matched to a real utility account, address, and phone number looks convincing. Treat messages that quote those details with extra caution.
What stayed out of the incident?
Southern Company said bank-account numbers, payment-card numbers, and driver's-license numbers were not accessed in the portal incident. That limit reduces direct theft from a stolen card number. It does not remove the risk from the contact and partial-ID data that was accessed.
Use different passwords for your utility login and email. Watch for account-takeover attempts that reuse your exposed phone or email. A caller who knows your address and utility name is still not proven legitimate.
What does joining mean right now?
This is an investigation seeking people for free case evaluation, not a filed certified class action. No class has been approved and no claim form pays compensation now. Contacting the firm puts you in its screening pool for possible data-privacy claims.
You do not pay to be evaluated. You may later be asked to share your notice, account details, and any fraud or spam tied to the breach. You can also wait for a filed case or settlement, if one occurs.
What should notice recipients do next?
The affected portal is the same system customers use to pay bills and manage accounts, according to IT Security News in the IT Security News report. Southern said it stopped the activity, engaged law enforcement, and is notifying victims by mail and email. Take these concrete steps:.
- Save the mailed notice and any email notice in one folder.
- Log in through your usual bookmarked utility site and review account contact details.
- Record unusual calls, texts, or password-reset emails that use your breach details.