Origin Energy Investigates Potential Cybersecurity Breach Impacting Customer Data Origin Energy, one of Australia’s largest energy providers, is probing a suspected cybersecurity incident that may have exposed customer data. In an ASX statement released Wednesday afternoon, the company confirmed unauthorized access to some customer information but clarified that sensitive financial details such as credit card or bank account numbers were not believed to be compromised. With approximately 4.7 million customers, Origin acknowledged the incident’s potential impact, stating it is treating the investigation as a priority. The company has engaged Australia’s Cyber Security Centre (ACSC) and the Australian Federal Police as part of its response. Further updates are expected as the investigation progresses.

Origin Energy Investigates Potential Customer Data Breach Origin Energy, one of Australia’s largest energy retailers with over 4.7 million customers, is probing a suspected security breach that may have exposed customer data. The company confirmed the incident in a statement, acknowledging unauthorized access to some customer records but clarifying that financial details, such as credit card or bank information, were not believed to be compromised. The breach came to light after a hacker reportedly shared a sample of 50 customer records with an Australian news outlet, containing names, addresses, emails, dates of birth, phone numbers, and billing history. While the claims remain unverified, Origin Energy has notified the Australian Cyber Security Centre (ACSC) and the Australian Federal Police as part of its urgent investigation. The incident follows a string of high-profile cyberattacks in Australia, including breaches at Optus and Medibank in 2022, as well as a recent attack on Partnered Health, which exposed sensitive medical records. Origin Energy’s shares fell by 2.5% following the announcement, reflecting investor concerns over the potential fallout. The company has pledged to provide further updates as its investigation progresses.

Origin Energy, a prominent Australian energy and internet provider, experienced a data breach involving a former employee who allegedly collected and stole sensitive personal information of approximately 700 individuals. The incident highlights an insider threat where unauthorized access was exploited to compromise confidential data, potentially exposing affected individuals to risks such as identity theft, financial fraud, or reputational harm. The breach underscores vulnerabilities in internal access controls and post-employment data security protocols, raising concerns about the protection of customer and employee information within the organization. While the exact nature of the stolen data (e.g., financial records, personal identifiers) was not detailed, the incident reflects a significant lapse in safeguarding private information against malicious insider actions.

Origin Energy, a major Australian electricity, gas, and internet provider, experienced a data breach where a terminated employee stole encrypted credit and debit card details of 732 customers. The employee attempted to email the encrypted file to their personal account on 30 July 2025, following unauthorized copying of data between 12 October 2023 and 30 July 2025. While the file was encrypted and no evidence of external access or misuse was found, Origin could not guarantee the data’s safety. The company reported the incident to the Office of the Australian Information Commissioner (OAIC), law enforcement, and the Australian Signals Directorate (ASD). Affected customers were notified, offered complimentary credit monitoring, and advised to monitor accounts or replace cards. The former employee, though not charged, signed a statutory declaration claiming deletion of the file. Origin is conducting an internal investigation to prevent future incidents, emphasizing its existing cybersecurity training and incident response protocols.