Origin Energy Hack Affects 900,000 Customers – What to Do 2026

The recent Origin Energy data breach has compromised the personal information of approximately 900,000 current and former customers of Australia's largest energy retailer. The company admitted it was warned of the hack three weeks before the public was notified, raising serious concerns about data security and transparency.

What Data Was Compromised in the Origin Energy Hack?

According to Origin Energy, the hacked data may include customers' names, addresses, dates of birth, phone numbers, account information, and partial credit card or bank account details (last four digits of credit cards or last three digits of bank accounts). This type of information is highly valuable to cybercriminals for identity theft and fraud.

Timeline of the Origin Energy Data Breach

Origin received emails from someone claiming to have accessed customer records on 2 July. However, the company did not treat it as a credible threat due to lack of proof. Only on 22 July, after receiving evidence that data had been accessed, did Origin announce the breach. CEO Frank Calabria apologized, saying, “We don’t take for granted the trust customers place in Origin.”

Why the Delay Matters

This three-week gap between initial warning and public disclosure is alarming. Cybersecurity experts emphasize that early notification allows customers to take protective measures sooner. Origin’s handling contrasts with best practices where companies notify affected users within days of confirmation.

Steps to Protect Yourself After the Origin Energy Hack

• Monitor bank and credit card statements for unauthorized transactions.
• Enable two-factor authentication on your online accounts.
• Place a fraud alert with credit reporting agencies.
• Change passwords for your Origin account and any other using the same credentials.
• Be wary of phishing scams – Origin will not ask for sensitive information via email or SMS.

Comparison: Origin Energy Breach vs. Other Australian Data Breaches

This breach affects roughly 900,000 individuals, making it one of the larger incidents in Australia’s energy sector. Earlier this year, Optus suffered a breach impacting 9.8 million customers, and Medibank had 3.9 million affected. While Origin’s numbers are smaller, the delay in notification sets it apart.

Frequently Asked Questions

The Origin Energy data breach serves as a stark reminder of the importance of cyber vigilance. If you are a current or former customer, take the proactive steps outlined above. Stay informed by following official updates from Origin and reputable cybersecurity sources.