Origin Energy Hack: 900,000 Customers Affected, Warning Delayed 2026

The Origin Energy hack has affected approximately 900,000 current and former customers, with the company admitting it was warned three weeks before making the breach public. This major data breach in Australia's largest energy retailer has exposed sensitive personal information, raising urgent concerns about data security and consumer protection.

What Happened in the Origin Energy Data Breach?

Origin Energy, serving 4.8 million customer accounts across Australia, confirmed that a significant portion of the 900,000 affected individuals are former customers. The compromised data includes names, addresses, dates of birth, phone numbers, and account details, along with partial credit card or bank account numbers.

The company received an email on 2 July claiming unauthorized access, but deemed it not credible until proof emerged on 22 July. This delay in public notification has sparked criticism, as customers were left vulnerable during the three-week gap.

Timeline of the Breach

• 2 July: Origin receives initial warning email from an alleged hacker.
• 22 July: Origin obtains proof of data access and announces the breach.
• Ongoing: Affected customers are being notified, and investigations continue.

What Data Was Compromised?

The stolen data may include personal identifiers and financial details. While Origin has stated that no information appears on the dark web, customers are advised to remain vigilant against scams and suspicious activity.

Chief executive Frank Calabria apologized and emphasized support for affected customers, but declined to answer questions about the breach's timing, potential insider involvement, or ransom demands.

Comparison of Data Breach Impacts

How to Protect Yourself After the Origin Energy Hack

If you are a current or former Origin customer, take immediate steps to safeguard your information. Monitor your bank and credit card statements for unusual activity, and consider placing a credit freeze or fraud alert on your accounts.

Be cautious of unsolicited calls, emails, or texts asking for personal details. Origin will never ask for your password or full financial information via email. Report any suspicious activity to your financial institution and the Australian Cyber Security Centre.

Key Takeaways for Affected Customers

• Stay alert for phishing scams that reference the breach.
• Change your Origin account password and enable two-factor authentication.
• Review your credit report for unauthorized inquiries.
• Keep records of all communications with Origin regarding the breach.

What Origin Energy Is Doing

Origin has secured its systems to prevent further unauthorized access and is notifying affected customers in stages. The company is cooperating with law enforcement, as the incident is considered a criminal matter under active investigation.

While Origin believes no data has been posted on the dark web, the full scope of the breach is still being assessed. Customers should expect direct communication from Origin with specific details about what information was accessed.

FAQ

Stay informed and proactive to mitigate the risks from this significant data breach. For more updates on cybersecurity and consumer protection, follow our business section.