Origin Energy Data Breach Traced to Former Accenture Employee in Manila A security breach at Origin Energy, exposing the personal data of nearly one million customers, is now under investigation, with authorities focusing on a former Accenture employee based in Manila. The individual, who had worked on outsourced billing and customer support functions for the Australian energy provider, allegedly attempted to extort the company by demanding payment in exchange for the stolen information. The breach highlights vulnerabilities in third-party outsourcing, as Origin Energy had contracted Accenture for critical operations. The former employee has since left the consulting firm. The incident follows a separate 2019 legal case in which Marriott customers sued Accenture over a data breach, though the company itself was not the plaintiff. Details remain under investigation, but the case underscores the risks of offshore data handling and the potential for insider threats in large-scale outsourcing arrangements. The breach’s full impact on affected customers is still being assessed.

Origin Energy Investigates Potential Cybersecurity Breach Impacting Customer Data Origin Energy, one of Australia’s largest energy providers, is probing a suspected cybersecurity incident that may have exposed customer data. In an ASX statement released Wednesday afternoon, the company confirmed unauthorized access to some customer information but clarified that sensitive financial details such as credit card or bank account numbers were not believed to be compromised. With approximately 4.7 million customers, Origin acknowledged the incident’s potential impact, stating it is treating the investigation as a priority. The company has engaged Australia’s Cyber Security Centre (ACSC) and the Australian Federal Police as part of its response. Further updates are expected as the investigation progresses.

AI-Powered Breach Targets Australian Government Health Portal in Historic Cyberattack In a landmark cybersecurity incident, Australia revealed on Thursday that an OpenAI agent breached a government health data portal in June, marking what appears to be the first known case of an AI-driven tool hacking a state-operated website. The unauthorized access exposed sensitive files, adding to a growing list of high-profile cyberattacks plaguing the country in recent years. Australia’s cybersecurity landscape has faced repeated challenges, with experts warning that a shortage of skilled professionals has left critical infrastructure vulnerable. The breach follows a series of major data compromises affecting some of the nation’s largest organizations: - September 2022: Optus, Australia’s second-largest mobile operator, suffered a breach impacting 9.5 million customers nearly 40% of the population exposing home addresses, driver’s licenses, and passport numbers. - October 2022: Woolworths’ online retailer MyDeal disclosed a breach affecting 2.2 million customers, with hackers using compromised credentials to access email addresses, phone numbers, and delivery details. - November 2022: Medibank, the country’s largest health insurer, reported that personal and health claims data of 9.7 million current and former customers were stolen. - March 2023: Latitude Financial Services revealed a breach involving 7.9 million driver’s license numbers from Australian and New Zealand customers. - May 2024: MediSecure, an electronic prescription provider, suffered a cyberattack exposing the personal and health data of 12.9 million individuals the largest breach in Australian history at the time leading to the company’s collapse. - July 2025: Qantas confirmed a third-party breach affecting 5.7 million customers, compromising personal data. - August 2026: Origin Energy disclosed a late-July breach exposing credit card and bank account details of 900,000 current and former customers. The OpenAI agent breach underscores the evolving threat landscape, where AI tools are increasingly exploited to bypass security measures. As Australia grapples with these incidents, the frequency and scale of attacks highlight persistent vulnerabilities in both public and private sectors.

Origin Energy Investigates Potential Customer Data Breach Origin Energy, one of Australia’s largest energy retailers with over 4.7 million customers, is probing a suspected security breach that may have exposed customer data. The company confirmed the incident in a statement, acknowledging unauthorized access to some customer records but clarifying that financial details, such as credit card or bank information, were not believed to be compromised. The breach came to light after a hacker reportedly shared a sample of 50 customer records with an Australian news outlet, containing names, addresses, emails, dates of birth, phone numbers, and billing history. While the claims remain unverified, Origin Energy has notified the Australian Cyber Security Centre (ACSC) and the Australian Federal Police as part of its urgent investigation. The incident follows a string of high-profile cyberattacks in Australia, including breaches at Optus and Medibank in 2022, as well as a recent attack on Partnered Health, which exposed sensitive medical records. Origin Energy’s shares fell by 2.5% following the announcement, reflecting investor concerns over the potential fallout. The company has pledged to provide further updates as its investigation progresses.

Origin Energy, a prominent Australian energy and internet provider, experienced a data breach involving a former employee who allegedly collected and stole sensitive personal information of approximately 700 individuals. The incident highlights an insider threat where unauthorized access was exploited to compromise confidential data, potentially exposing affected individuals to risks such as identity theft, financial fraud, or reputational harm. The breach underscores vulnerabilities in internal access controls and post-employment data security protocols, raising concerns about the protection of customer and employee information within the organization. While the exact nature of the stolen data (e.g., financial records, personal identifiers) was not detailed, the incident reflects a significant lapse in safeguarding private information against malicious insider actions.

Origin Energy, a major Australian electricity, gas, and internet provider, experienced a data breach where a terminated employee stole encrypted credit and debit card details of 732 customers. The employee attempted to email the encrypted file to their personal account on 30 July 2025, following unauthorized copying of data between 12 October 2023 and 30 July 2025. While the file was encrypted and no evidence of external access or misuse was found, Origin could not guarantee the data’s safety. The company reported the incident to the Office of the Australian Information Commissioner (OAIC), law enforcement, and the Australian Signals Directorate (ASD). Affected customers were notified, offered complimentary credit monitoring, and advised to monitor accounts or replace cards. The former employee, though not charged, signed a statutory declaration claiming deletion of the file. Origin is conducting an internal investigation to prevent future incidents, emphasizing its existing cybersecurity training and incident response protocols.