Data breach at Origin Energy: 900,000 customers exposed

· cybersécurité, violation de données, Origin Energy, Australie, fraude

Data breach at Origin Energy: 900,000 customers exposed

Australian energy provider Origin Energy has confirmed a data breach affecting 900,000 current and former customers. The company is investigating with authorities after an individual claimed to have accessed personal information.

Data breach at Origin Energy: 900,000 customers affected

The Australian electricity and gas provider Origin Energy has confirmed a data breach affecting 900,000 current and former customers.

The compromised data includes names, dates of birth, phone numbers, addresses, and account details. Some also contain the last four digits of payment cards or the last three digits of a bank account. Origin Energy states that these fragments are insufficient to conduct transactions.

Timeline and allegations

The company confirmed the incident on July 22, 2026, after an individual, operating under the pseudonym John Doe, allegedly contacted Origin Energy’s security teams, board members, and customer service before threatening to publish the information if no response was provided.

Its CEO, Frank Calabria, emphasized that the matter is subject to a criminal investigation, limiting the information disclosed.

Company response and measures taken

Origin Energy is collaborating with external cybersecurity experts and has notified Australian authorities, including the Australian Cyber Security Centre, federal police, and the Information Commissioner.

The company stated that its operations have not been disrupted. It is contacting affected customers and warning them of potential risks, such as scams exploiting the exposed data.

Consequences for customers

While partial banking information is not usable, other data could be exploited for fraud. Origin Energy advises customers to monitor their accounts and report any suspicious activity.

The incident highlights persistent vulnerabilities in customer data systems. Authorities continue to investigate to determine the full extent of the breach.

Key Points

  • 900,000 current and former Origin Energy customers affected by a data breach
  • Compromised data: names, dates of birth, phone numbers, addresses, and account details
  • An individual (pseudonym John Doe)
  • Origin Energy is collaborating with cybersecurity experts and Australian authorities
  • Risks of fraud and scams for affected customers

Sources

  1. SecurityWeek - "Origin Energy Data Breach Affects 900,000 Australians". (secondary)
  2. Security Affairs - "Australian energy provider Origin Energy disclosed a data breach impacting customer data". (secondary)

Transparency: 2 sources (0 primary, 2 secondary). Verification: July 28, 2026.

Truthyx - July 28, 2026