Origin Energy Hack Exposes Customer Data: Banking Details Stolen 2026

The recent Origin Energy hack has compromised personal and partial banking details of millions of Australian customers, raising serious concerns about data security and identity theft. Origin Energy, one of Australia's largest energy utilities, confirmed that hackers accessed names, addresses, phone numbers, dates of birth, and account information, along with the last four digits of credit cards or last three digits of bank accounts. While the company states this incomplete financial data cannot be used for purchases, cybersecurity experts warn that the breach still poses significant risks.

What Data Was Stolen in the Origin Energy Hack?

Origin Energy reported to the ASX that the breach affected up to 4.8 million customer accounts. Although only a subset of customers may have had their details accessed, the hacker claims to have obtained data on 2 million individuals. The stolen information includes:

• Names and addresses
• Dates of birth and phone numbers
• Origin account details
• Last four digits of credit cards
• Last three digits of bank account numbers

Importantly, partial bank account or credit card numbers cannot be used to make purchases directly, but they can be combined with other stolen data for targeted phishing scams or identity fraud.

How the Hack Occurred and Company Response

Origin has not yet disclosed the method of the attack. CEO Frank Calabria apologized, stating the company is working with independent cyber experts and authorities to secure systems. Origin will notify affected customers once investigations confirm individual impact. The firm has also implemented additional security measures to prevent further unauthorized access.

Cybersecurity Expert Warnings

Rumpa Dasgupta, a cybersecurity lecturer at La Trobe University, warned that personalized records could be exploited not only for digital crimes but also for physical crimes like burglary. The combination of a person's name, address, and phone number makes them vulnerable to impersonation scams.

Comparison: Origin Energy Hack vs. Other Australian Data Breaches

This table highlights that energy utility breaches are less common but equally dangerous due to the sensitive nature of location and financial data.

Key Takeaways for Origin Energy Customers

• Monitor your bank statements and credit reports for unusual activity.
• Enable two-factor authentication on all accounts where possible.
• Be cautious of unsolicited calls or emails asking for personal information.
• Change passwords for your Origin Energy account and any other accounts using the same credentials.
• Consider placing a credit freeze or fraud alert with credit bureaus.

FAQ

Stay informed and proactive. If you suspect your data has been misused, report it to the Australian Cyber Security Centre (ACSC) or call IDCARE at 1800 595 160. Protecting your identity starts with awareness.