Origin Energy has officially confirmed that unauthorized parties gained access to its internal systems, resulting in the exposure of sensitive customer information. The energy retailer, which serves nearly five million accounts across Australia, is currently working to determine the full scope of the incident and identify exactly how many individuals have been impacted. The company has apologized to its customers and is in the process of notifying those whose data was compromised.
According to the company, the exposed records may include names, physical addresses, dates of birth, contact phone numbers, and account information. Additionally, the breach involved partial financial details, specifically the last four digits of credit cards or the last three digits of bank accounts. Origin has emphasized that this incomplete financial data cannot be used by criminals to hijack accounts or process unauthorized charges, though it remains a significant privacy concern.
This security incident was first brought to light after an alleged hacker contacted media outlets with a sample of stolen records. Upon receiving this information, Origin launched an urgent investigation and alerted the Australian Securities Exchange. The company is now collaborating with federal authorities, including the Australian Cyber Security Centre, the Australian Federal Police, and the Office of the Australian Information Commissioner, to manage the fallout and secure its systems against further intrusion.
In response to the breach, Origin has established a dedicated support portal and contact line to assist affected customers. The company has also engaged independent cybersecurity experts to conduct a forensic analysis of the attack. While the investigation is ongoing, the incident highlights the growing risks faced by major utility providers as they manage vast amounts of personal data in an increasingly hostile digital landscape.