A data breach at Georgia Power has compromised the personal information of 300,000 customers, The Atlanta Journal-Constitution reported.

The disclosure puts one of the largest electric utilities in the southeastern United States on the growing list of energy providers hit by security incidents involving customer data. At this stage, the company has confirmed the scale of the exposure: 300,000 customer accounts are affected.

What do we know so far?

The breach came to light through reporting by The Atlanta Journal-Constitution. Georgia Power, a subsidiary of Southern Company, serves millions of electric customers across the state of Georgia.

For CIOs and security leaders, the incident is another signal that utility-sector customer data remains a prime target. The confirmed scope — 300,000 customers — places this incident in the mid-range of recent utility breaches by affected-record count.

Key details as they stand:

• Scale: 300,000 customers affected
• Target: Georgia Power, the state's largest electric utility
• Disclosure: Reported by The Atlanta Journal-Constitution

What should affected customers and security teams watch next?

Breach disclosures of this kind typically trigger a sequence of follow-on actions: notification letters to affected individuals, regulator filings, and in many cases credit-monitoring offers. Enterprises doing business with the utility should also review any shared account or billing data for exposure risk.

Security teams monitoring third-party risk should note the incident as part of a broader pattern of attacks on critical-infrastructure adjacent data stores — not operational systems in this case, but the customer records that sit alongside them.

This is a developing story. Additional details on the cause of the breach, the data elements exposed, and the company's remediation steps are expected as Georgia Power and regulators provide further information.