Origin Energy, one of Australia's largest energy retailers, has launched an urgent investigation into a potential cybersecurity incident that may have exposed the personal information of millions of its customers. The company confirmed it is looking into reports of unauthorized access to its systems after an alleged hacker claimed to possess the data of approximately two million individuals. While the full extent of the breach remains under review, the company has stated that it does not currently believe that credit card or bank account details were compromised in the incident.
The situation came to light after reports surfaced that an individual had provided a sample of 50 customer records to a media outlet, which included names, addresses, email addresses, dates of birth, phone numbers, and billing history. Origin Energy has since notified the Australian Federal Police, the Australian Cyber Security Centre, and the Office of the Australian Information Commissioner to manage the response and ensure regulatory compliance. The company acknowledged the uncertainty caused by the event and expressed its commitment to providing updates as the investigation progresses.
For the millions of Australians who rely on Origin for electricity, gas, and internet services, the news has prompted significant concern regarding data privacy. While the company is working to verify the claims and secure its systems, the incident highlights the ongoing challenges major Australian corporations face in protecting sensitive customer information from increasingly sophisticated cyber threats. As the investigation continues, the focus remains on determining how the unauthorized access occurred and whether any additional data was taken.
Shares in Origin Energy saw a decline following the announcement as markets reacted to the potential operational and reputational risks associated with the breach. The company has not yet provided a timeline for when it will have a complete picture of the incident, but it is operating under the assumption that the matter requires immediate and thorough attention. Customers are advised to remain vigilant for any suspicious activity or communications as the situation unfolds.