Industry - Data Breach
Executive Summary
Origin Energy confirmed a data breach affecting an undisclosed number of its 4.7 million customers, with stolen information including names, addresses, dates of birth, phone numbers, account details, and partial payment information such as the last four digits of credit cards. While the incomplete financial data cannot be used directly for purchases, cybersecurity experts warn the personal information can be exploited for phishing attacks, identity theft, and social engineering scams. The ene...
What Happened
Origin Energy confirmed a data breach affecting an unknown number of its approximately 4.7 million customers in Australia. The compromised information includes customers' names, addresses, dates of birth, phone numbers, account details, and partial payment information such as the last four digits of credit cards or last three digits of bank accounts. The energy retailer announced the incident on July 23, 2026, after initially reporting a potential security incident the day before.
Who Is Affected
Origin Energy customers across Australia are affected, though the company has not disclosed the exact number impacted from its base of 4.7 million customer accounts. The breach affects users of Origin's electricity, natural gas, LPG, and internet services. Origin stated it is working to identify affected customers and will contact them directly.
Why It Matters
This represents Australia's most high-profile cyber incident since the Partnered Health breach earlier in July 2026, adding to a series of major data breaches affecting Australian companies including Optus, Qantas, and Medibank in recent years. While the incomplete financial data cannot be used directly for fraudulent purchases, cybersecurity experts warn the stolen personal information creates significant risks for targeted phishing attacks, identity theft, and social engineering scams that exploit the authentic customer details to impersonate Origin Energy in convincing phone or email scams.
What You Should Do
If you are an Origin Energy customer, watch for direct communication from the company and use only their official dedicated contact number rather than responding to unsolicited calls or emails. Be extremely cautious of any unexpected contact claiming to be from Origin Energy, even if the caller references accurate account details, dates of birth, or partial payment information. Monitor your accounts for suspicious activity and consider placing fraud alerts with credit reporting agencies if you are contacted by Origin confirming your data was compromised.
Summary generated from verified sources and reviewed before publication. How we summarize.
Sources