Origin Energy Data Breach Exposes Banking and ID Details for Hundreds of Thousands of Customers
An unauthorized cyber breach at Origin Energy compromised sensitive customer data, including banking information and government concession scheme records, affecting roughly 900,000 clients, according to company disclosures. On Friday, the energy giant confirmed that the security incident exposed up to 60 bank account numbers and 100 identity document numbers. According to the company, the compromised records for most impacted clients included names, addresses, dates of birth, contact phone numbers, account numbers, and the last four digits of credit cards or bank accounts.
Official Response and Security Enhancements
Origin Energy chief executive Frank Calabria stated that an internal review of the accessed information has been substantially completed, enabling the firm to roll out enhanced security systems. According to Mr. Calabria, while the criminal investigation remains ongoing, the company is confident in its operational response and is prioritizing direct customer notifications and support services. Government bodies, including the Australian government, the Australian Cyber Security Centre, the National Office of Cyber Security, and the Australian Federal Police, are actively involved in the response.
Did you know? Origin Energy has rolled out specialist identity and cyber support services for affected customers, providing identity monitoring and free credit monitoring for a 12-month period.
Threat of Scams and Impersonation Risks
Mr. Calabria previously warned that malicious actors may attempt to exploit the data breach through scam activity or by impersonating company representatives. To mitigate these risks, Origin urges customers to remain vigilant, utilize two-step authentication to protect their accounts, and stay informed regarding emerging cyber threats. Additional reporting from SQMagazine and Business News Australia noted that external sources and media outlets have tracked various aspects of the incident, including unconfirmed claims regarding ransom demands and employee logon vulnerabilities.
Frequently Asked Questions
How many customers were affected by the Origin Energy data breach?
Roughly 900,000 clients were impacted by the security incident, which exposed personal details and, in limited instances, full bank account or identity document numbers.
What specific data was exposed in the breach?
Exposed information varied by customer but included names, addresses, dates of birth, phone numbers, account numbers, partial payment digits, and in specific cases, government concession scheme details.

What support is Origin Energy offering to affected customers?
Origin has deployed specialist identity and cyber support services, which include identity monitoring and free credit monitoring for 12 months.
Which authorities are investigating the incident?
The Australian Federal Police, the Australian Cyber Security Centre, the National Office of Cyber Security, and the Australian government are actively involved in the ongoing response and investigation.
Stay informed on the latest developments in the energy sector and cyber security by exploring our related coverage on the ongoing energy crisis and corporate data protection.
Worth a look