A Georgia resident has filed a class-action lawsuit against Southern Company, the parent of Georgia Power, after the utility said a cyberattack exposed information tied to roughly 400,000 customer accounts, court papers and local reporting show.
What the complaint says
The complaint, filed in Georgia, alleges Southern Company owed its customers a duty to encrypt and more reliably protect their information and accounts. The plaintiff contends the company should have been better at identifying and guarding against threats that could lead to unauthorized access.
The court filing states that of the roughly 400,000 impacted accounts, about 300,000 were Georgia Power customers. The suit seeks an award of actual, exemplary, punitive, compensatory, statutory and nominal damages. It also asks for recovery of attorneys’ fees and court costs, including fees for expert witness testimony, and demands a jury trial on all claims.
Company response and next steps
- Southern Company announced in early October that a cyberattack had exposed customer data tied to the parent company.
- A spokesman for Southern Company declined to comment on the pending litigation, according to local reporting.
- The plaintiffs are seeking multiple forms of damages and have requested the case proceed to a jury.
The suit frames the incident as the result of inadequate safeguards and monitoring. It alleges the utility should have used stronger protections such as encryption and better threat detection to prevent or limit unauthorized access to customer records.
Why it matters to consumers
Large-scale utility breaches can expose consumers to identity theft and fraud risks when attackers obtain account details and contact information. The complaint seeks to hold Southern Company accountable through damages and litigation costs, and the case could influence how utilities and their holding companies invest in cybersecurity and customer protections going forward.
| Item | Detail from filing/report |
|---|---|
| Accounts reportedly impacted | 400,000 |
| Georgia Power customers affected | 300,000 |
| Relief sought | Actual, exemplary, punitive, compensatory, statutory and nominal damages; attorneys’ fees; jury trial |
The complaint is the latest example of litigation that often follows corporate disclosures of data incidents. The filing is a new development separate from the company’s breach notification and public statements about the attack.
Local reporting that obtained details of the complaint reached out to Southern Company; the company’s spokesman declined to comment on the pending litigation.
