Industry - Data Breach
Executive Summary
Origin Energy, Australia's largest electricity and gas retailer serving 4.8 million customers, confirmed a data breach exposing customer names, addresses, dates of birth, phone numbers, account information, and partial financial details including the last four digits of credit cards. A threat actor claiming to hold data on 2 million customers has demanded contact within two weeks or threatens to publicly leak the stolen information. The exposed financial details are incomplete and cannot be u...
What Happened
Origin Energy, Australia's largest electricity and gas retailer serving 4.8 million customers, confirmed on July 23, 2026 that it suffered a data breach exposing customer names, physical addresses, dates of birth, phone numbers, account information, and partial financial details including the last four digits of credit cards and last three digits of bank accounts. A threat actor claiming to hold data on 2 million customers contacted media outlets demanding Origin respond within two weeks or face public release of the stolen information. The company is investigating with federal agencies including the Australian Federal Police, Australian Cyber Security Centre, and the Office of the Australian Information Commissioner.
Who Is Affected
Customers of Origin Energy are affected, though the company is still determining the total number of impacted individuals from its 4.8 million customer base. The threat actor claims to possess data on 2 million customers. Affected individuals may have had their personal contact information, account details, and partial financial information exposed, though Origin states the incomplete financial details cannot be used to hijack accounts or make unauthorized charges.
Why It Matters
This breach represents a significant compromise of a critical infrastructure provider in Australia, coming shortly after another major breach affecting Australian healthcare clinics. The exposure of personal and partial financial information creates risks of identity theft, targeted phishing attacks, and social engineering fraud against millions of customers. The threat actor's public extortion attempt and two-week deadline escalates pressure on both the company and potentially affected individuals.
What You Should Do
Origin Energy customers should watch for direct notifications from the company through its dedicated support portal and monitor their accounts for suspicious activity. Individuals should be alert for phishing attempts or social engineering scams that leverage the exposed personal information, such as calls or emails claiming to be from Origin or financial institutions. Customers should verify any communication purporting to be from Origin by contacting the company directly through official channels rather than responding to unsolicited messages.
Summary generated from verified sources and reviewed before publication. How we summarize.
Sources