Origin Energy Data Breach: 900,000 Customers Affected 2026

Origin Energy data breach has compromised personal details of approximately 900,000 current and former customers, raising urgent concerns about cybersecurity in Australia's energy sector. Australia’s largest energy retailer confirmed the incident on July 22, 2023, after receiving proof of unauthorized access.

What Happened in the Origin Energy Data Breach?

Origin Energy revealed that hackers accessed customer records including names, addresses, dates of birth, phone numbers, account information, and partial financial data (last four digits of credit cards or last three digits of bank accounts). The breach affects a mix of current and former customers, with a “significant” proportion being former clients.

Chief executive Frank Calabria apologized, stating the company received a threatening email on July 2 but initially deemed it not credible. It took until July 22 to confirm the data was accessed. Origin delayed public notification by three weeks, drawing criticism from privacy advocates.

How Origin Energy’s Response Compared to Industry Standards

Below is a comparison of Origin’s actions against recommended breach response protocols:

This delay and lack of transparency have eroded customer trust. The Office of the Australian Information Commissioner (OAIC) is investigating.

Key Takeaways for Customers

• Monitor financial accounts for unusual transactions. Report any suspicious activity immediately.
• Enable two-factor authentication on energy accounts and other online services.
• Be alert to phishing scams—criminals may use stolen data in targeted emails or calls.
• Change passwords for Origin Energy accounts and any site using the same credentials.
• Consider a credit freeze to prevent new accounts being opened in your name.

What Data Was Exposed?

The exposed information includes: names, addresses, dates of birth, phone numbers, account numbers, and partial banking or credit card details (last four or three digits). Although Origin says no full credit card numbers or passwords were leaked, the data can still fuel identity theft and social engineering attacks.

Who Is Affected?

Origin Energy has 4.8 million customer accounts across Australia. The 900,000 compromised accounts include both active and former customers. The company is in the process of contacting all affected individuals.

FAQ

Cybersecurity experts urge all affected customers to act quickly. The breach serves as a reminder for all Australians to regularly review their digital security practices. If you suspect misuse of your data, contact the OAIC or your financial institution.