● Covered by 4 sources · 5 reportsMedium impact4 negative1 neutral
Origin Energy Confirms Customer Data Breach Affecting Personal and Partial Banking Details
Key points
- Origin Energy confirmed a data breach affecting customer data.
- Accessed data includes names, addresses, phone numbers, and partial bank details.
- The company has 4.8 million customer accounts in Australia.
- Australian authorities are investigating the incident.
- Accessed data includes dates of birth.
- Accessed data includes Origin account information.
- Accessed data includes the last four digits of a credit card.
- Accessed data includes the last three digits of a bank account.
- Origin first revealed the hack in a statement yesterday.
- Origin initially believed credit card or bank details had not been accessed.
- Origin has not detailed how the hack occurred.
- Origin CEO Frank Calabria apologized to customers.
- Origin is working with independent cyber experts.
- Origin will notify customers once it confirms who was affected.
- A hacker claims to have accessed 2 million customer details.
- Origin is Australia's largest energy retailer.
- Origin provides electricity, natural gas, and broadband internet services.
- Origin has annual revenue of $8.5 billion.
- Origin holds a 20% ownership stake in Octopus.
- Origin provides LPG services.
- Origin is working with federal agencies.
- Origin launched an investigation into a potential security incident on July 22.
- Origin confirmed the data breach in an update on July 23.
- Origin has notified Australian law enforcement, cybersecurity, and privacy agencies.
- The data breach affects 900,000 current and former customers.
- Origin initially dismissed a potential security threat.
- An individual claiming the hack suggested data would be leaked if Origin refused to pay a ransom.
- The alleged hacker later told The Australian an agreement had been reached with Origin.
- Origin has not mentioned reaching an agreement with the attacker.
Customer Data Accessed
Origin Energy confirmed that customer addresses, phone numbers, and partial bank account data were accessed in a hack. The company provides electricity, fossil gas, LPG, and internet services to 4.8 million customer accounts in Australia.
Accessed data may include customer names, dates of birth, phone numbers, Origin account information, the last four digits of a credit card, or the last three digits of a bank account. Origin stated that incomplete credit card or bank account information cannot be used for purchases or account access.
Potential Scope and Risks
Origin has not yet confirmed the exact number of affected customers, but a person claiming responsibility for the hack alleged that 2 million customer details were accessed. The company plans to notify affected customers once confirmed.
Experts warn that if the data is leaked, it could be misused for identity theft, highly targeted phishing campaigns, or even physical crimes like burglary by identifying vulnerable properties.
Company and Authority Response
Origin Energy's chief executive, Frank Calabria, stated the company is securing its systems and working with independent cyber experts and authorities. Origin first revealed the hack in a statement, initially believing credit card or bank details were not accessed, but later updated this assessment.
The Australian Cyber Security Centre, the Australian federal police, the Office of the Australian Information Commissioner (OIAC), and the National Office of Cyber Security are all investigating the incident.
Updates
- The data breach affects 900,000 current and former customers.
- Origin initially dismissed a potential security threat.
- An individual claiming the hack suggested data would be leaked if Origin refused to pay a ransom.
- The alleged hacker later told The Australian an agreement had been reached with Origin.
- Origin has not mentioned reaching an agreement with the attacker.
- Origin provides LPG services.
- Origin is working with federal agencies.
- Origin launched an investigation into a potential security incident on July 22.
- Origin confirmed the data breach in an update on July 23.
- Origin has notified Australian law enforcement, cybersecurity, and privacy agencies.
- Origin will notify customers once it confirms who was affected.
- A hacker claims to have accessed 2 million customer details.
- Origin is Australia's largest energy retailer.
- Origin provides electricity, natural gas, and broadband internet services.
- Origin has annual revenue of $8.5 billion.
- Origin holds a 20% ownership stake in Octopus.
- Accessed data includes dates of birth.
- Accessed data includes Origin account information.
- Accessed data includes the last four digits of a credit card.
- Accessed data includes the last three digits of a bank account.
- Origin first revealed the hack in a statement yesterday.
- Origin initially believed credit card or bank details had not been accessed.
- Origin has not detailed how the hack occurred.
- Origin CEO Frank Calabria apologized to customers.
- Origin is working with independent cyber experts.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
Australian power company Origin Energy announced a data breach affecting 900,000 current and former customers, with threat actors accessing personal and financial details. The company confirmed the intrusion after initially dismissing a potential security threat, and is now investigating the criminal matter.
Australian energy company Origin Energy confirmed a data breach involving unauthorized access to customer information, including names, addresses, and partial payment details. A hacker claims to have stolen records of 2 million customers and threatened to leak the data if a ransom is not paid, impacting a significant portion of the company's 4.8 million customer base.
Australian energy provider Origin Energy confirmed a data breach affecting an unknown number of its 4.8 million customers, exposing personally identifiable information (PII) and partial financial details. A threat actor claims to possess data for 2 million customers and threatens to leak it if not contacted for negotiation, raising concerns about potential further exposure and customer impact.
Origin Energy, a major Australian energy supplier, confirmed a data breach impacting nearly 5 million customers. The compromised data includes account information, partial credit card and bank account numbers, names, addresses, and dates of birth.
Origin Energy confirmed a data breach affecting its 4.8 million customer accounts, compromising personal details and partial banking information. This incident exposes customers to potential identity theft and phishing, highlighting ongoing cybersecurity risks for critical service providers.