A Georgia resident is suing Southern Co., the parent company of Georgia Power, in a proposed class action after a cyberattack exposed information linked to many customer accounts.
The lawsuit asks whether one of the state’s largest utility companies had enough safeguards to protect the personal information customers trusted it to keep safe.
Here’s what to know
Southern Co. disclosed that a cyberattack had exposed customer information. The lawsuit claims the company did not do enough to secure that data, leaving many customers vulnerable.
Most of the affected account holders were Georgia residents, and Georgia Power said 300,000 of the 400,000 impacted accounts were tied to its customers, Channel 2 Action News reported.
In the complaint, the named plaintiff argues that Southern Co. was obligated to encrypt customer information and more securely protect both the data and the accounts associated with it. The suit also says the company should have done more to detect possible threats before the breach.
More background
The case centers on the exposure of private data at a company that provides an essential service. Utility customers often have little choice but to share personal information to keep their electric service running.
Southern Co.’s announcement about the breach has now become a class-action challenge to the sufficiency of the company’s data-security practices.
A Southern Co. spokesman declined to comment while the litigation is pending.
What’s being done?
The lawsuit seeks several forms of relief, including actual, exemplary, punitive, compensatory, statutory, and nominal damages. It also asks for attorneys’ fees and court costs, including expert-witness expenses, where allowed by law.
The filing also argues that Southern Co. should have taken stronger protective measures, such as encrypting customer information, better securing customer accounts, and improving its ability to identify potential threats.
The plaintiffs also seek a jury trial on all claims.
Where can I learn more?
Utility companies and other businesses have faced similar breach claims. They range from exposed customer records and cyberattacks at energy companies to lawsuits seeking compensation.
• In Alabama, 100,000 power accounts exposed included partial Social Security numbers at Alabama Power.
• CenterPoint confirmed a customer data breach after a hacker leaked alleged records for millions.
• Americold settled data-breach claims for $5.25 million and offered victims up to $25,000.
• An Alabama homeowner says an invasion of privacy came from a power line dispute.
• In Colorado, residents sue electric co-op over the Aspen Acres fire and ignored warnings.
Get TCD’s free newsletters for easy tips, smart advice, and a chance to earn $5,000 toward home upgrades. To see more stories like this one, change your Google preferences here.
