[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fM_KUezRuKicxEyQbwlbWrD6gQGu0X8lUU337FwhhGTI":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":139},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"ccfb52e8-4a86-4fb2-a04a-3f3082aa9863","Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts","georgia-power-alabama-power-data-breach-hits-400-000-accounts-673aae","Southern Company is notifying customers that their utility account information was accessed by hackers. The post Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts appeared first on SecurityWeek.","Southern Company notified approximately 400,000 customers that an unauthorized third party accessed their utility account information through the company's online customer portal. The breach affected roughly 300,000 Georgia Power accounts and 100,000 Alabama Power accounts, with exposed data including customer names, mailing addresses, phone numbers, emails, and last 4 digits of Social Security Numbers. The company reports that attackers did not access bank account numbers, payment card numbers, or driver's license numbers, and affected customers are being offered one year of free credit monitoring.","Southern Company utility breach exposes 400K customer accounts including names, addresses, and SSN last 4 digits.","https:\u002F\u002Fwww.securityweek.com\u002Fgeorgia-power-alabama-power-data-breach-hits-400000-accounts\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2023\u002F05\u002FCOSMICENERGY-OT-Malware.jpg","2026-10-07T14:15:20+00:00","2026-10-07T16:00:20.484334+00:00",8,[17,20,23,25,27],{"name":18,"type":19},"Southern Company","vendor",{"name":21,"type":22},"Southern Company Online Customer Portal","product",{"name":24,"type":19},"Georgia Power",{"name":26,"type":19},"Alabama Power",{"name":28,"type":19},"Mississippi Power","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":29,"icon":31,"name":32,"slug":33},null,"Breaches","breaches",[35,40,45],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":41},{"id":42,"icon":31,"name":43,"slug":44},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":46},{"id":47,"icon":31,"name":48,"slug":49},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",[],[18,24,26],{"controls":53,"vendors":138},[54,83,112],{"slug":55,"name":56,"problem":57,"products":58},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"slug":84,"name":85,"problem":86,"products":87},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"wiz","Wiz","\u002Fvendor-logos\u002Fwiz.png","wiz-cloud","Wiz Cloud","https:\u002F\u002Fwww.wiz.io\u002Fplatform\u002Fwiz-cloud","Agentless cloud security posture and attack path analysis across major cloud providers.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.",{"slug":113,"name":114,"problem":115,"products":116},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[117,122,130],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":118,"product_name":119,"url":120,"description":121},"purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",[],{"slug":140,"title":141,"body":142,"framework_refs":143,"framework_notes":159},"unauthorized-portal-access-exposes-400000-utility-customer-records","Unauthorized Portal Access Exposes 400,000 Utility Customer Records","An unauthorized third party gained access to Southern Company's online customer portal, compromising personal data for approximately 400,000 customers across Georgia Power and Alabama Power. The incident highlights critical weaknesses in how access to customer-facing web portals is controlled, monitored, and restricted. Sensitive partial identity data — including partial Social Security Numbers — was exposed, creating real risk for phishing, social engineering, and identity theft downstream. The fact that attackers accessed the portal without detection until after the breach underscores the need for robust session monitoring and anomalous access alerting. Offering one year of credit monitoring is a reactive measure; proactive controls should have prevented unauthorized access in the first place.",[144,145,146,147,148,149,150,151,152,153,154,155,156,157,158],"CIS Control 5 – Account Management","CIS Control 6 – Access Control Management","CIS Control 8 – Audit Log Management","CIS Control 16 – Application Software Security","NIST SP 800-53 AC-2 – Account Management","NIST SP 800-53 AC-7 – Unsuccessful Logon Attempts","NIST SP 800-53 AU-6 – Audit Record Review, Analysis, and Reporting","NIST SP 800-53 IA-2 – Multi-Factor Authentication","NIST SP 800-53 SI-10 – Information Input Validation","GDPR Article 5(1)(c) – Data Minimization","GDPR Article 32 – Security of Processing","GDPR Article 33 – Notification of Personal Data Breach","NIST CSF PR.AC-1 – Identities and Credentials Managed","NIST CSF DE.CM-7 – Monitoring for Unauthorized Activity","NERC CIP-007 – System Security Management (utility context)",{}]