Origin Energy, a prominent Australian energy and internet provider, experienced a data breach involving a former employee who allegedly collected and stole sensitive personal information of approximately 700 individuals. The incident highlights an insider threat where unauthorized access was exploited to compromise confidential data, potentially exposing affected individuals to risks such as identity theft, financial fraud, or reputational harm. The breach underscores vulnerabilities in internal access controls and post-employment data security protocols, raising concerns about the protection of customer and employee information within the organization. While the exact nature of the stolen data (e.g., financial records, personal identifiers) was not detailed, the incident reflects a significant lapse in safeguarding private information against malicious insider actions.

Origin Energy, a major Australian electricity, gas, and internet provider, experienced a data breach where a terminated employee stole encrypted credit and debit card details of 732 customers. The employee attempted to email the encrypted file to their personal account on 30 July 2025, following unauthorized copying of data between 12 October 2023 and 30 July 2025. While the file was encrypted and no evidence of external access or misuse was found, Origin could not guarantee the data’s safety. The company reported the incident to the Office of the Australian Information Commissioner (OAIC), law enforcement, and the Australian Signals Directorate (ASD). Affected customers were notified, offered complimentary credit monitoring, and advised to monitor accounts or replace cards. The former employee, though not charged, signed a statutory declaration claiming deletion of the file. Origin is conducting an internal investigation to prevent future incidents, emphasizing its existing cybersecurity training and incident response protocols.