Origin Energy Data Breach Hits 900,000 Customers – What to Know 2026

The Origin Energy data breach has exposed personal information of 900,000 current and former customers, making it one of the largest cyber incidents in Australia’s energy sector. The company admitted it was warned three weeks before going public, raising concerns about transparency and security protocols.

What Happened in the Origin Energy Hack?

Origin Energy, Australia’s largest energy retailer, revealed that a hacker accessed customer records on an unauthorized basis. The breach affects names, addresses, dates of birth, phone numbers, account information, and partial credit card or bank details. The company has 4.8 million customer accounts across electricity, gas, LPG, and internet services.

Timeline of Events

• 2 July: Origin receives emails from someone claiming to have accessed customer records, but no proof was provided at that time.
• 22 July: Origin obtains proof that customer data was accessed and announces the breach publicly.
• Late July: Affected customers begin receiving notifications, three weeks after the initial warning.

How Does This Compare to Other Australian Data Breaches?

While Origin’s breach is smaller in scale, it underscores the ongoing vulnerability of critical infrastructure and customer data across Australian industries.

What Data Was Compromised?

The exposed data includes names, addresses, dates of birth, phone numbers, account information, and the last four digits of credit cards or last three digits of bank accounts. Origin states that no data has been posted on the dark web yet, but customers remain at risk of scams and phishing attempts.

Key Takeaways for Affected Customers

• Be vigilant for suspicious emails, calls, or texts asking for personal information.
• Monitor bank and credit card statements for unauthorized transactions.
• Change passwords for Origin accounts and any other services using the same credentials.
• Consider placing a credit freeze with major credit bureaus.
• Enable two-factor authentication on all sensitive accounts.

What Origin Energy Is Doing

CEO Frank Calabria apologized and said the company is cooperating with law enforcement. Origin has secured its systems to prevent further breaches and is notifying affected customers. The company declined to answer whether a ransom was paid, or whether staff were involved.

FAQ

Stay updated with the latest news on the Origin Energy data breach and other cybersecurity incidents by following our Australia section. Protect your personal information and report any suspicious activity to the Australian Cyber Security Centre.