Origin Energy, a leading energy provider in Australia, has announced a significant data breach affecting approximately 900,000 of its current and former customers. The breach, which involved unauthorized access to customer data, has prompted the company to initiate an extensive forensic investigation.
Company Response and Customer Support
Following the discovery of the data security incident, Origin Energy’s CEO, Frank Calabria, issued an apology to affected customers. The company has prioritized providing support, extending customer service hours, and setting up a dedicated contact line to assist those impacted.
Origin initially became aware of potential security concerns in early July 2026. However, it was not until July 22 that new information led the company to confirm a possible compromise, prompting immediate customer notifications.
Details of the Data Breach
On July 23, Origin confirmed that an unauthorized entity had accessed and disclosed certain customer information. Data exposed in the breach includes names, residential addresses, dates of birth, phone numbers, and account details. In some instances, the last four digits of credit cards or last three digits of bank accounts were also compromised. Although these details alone cannot be used for transactions, their combination with other personal information increases the risk of targeted scams.
<
To address the situation, Origin is collaborating with independent cybersecurity experts to contain the breach and secure their systems. They have also involved Australian government bodies such as the Australian Cyber Security Center and the Australian Federal Police in the investigation.
Protective Measures and Recommendations
Customers affected by the breach have been offered specialized identity and cybersecurity support. Origin advises all customers to be cautious of unexpected communications that may be phishing attempts, urging them to verify the sender independently through official channels.
The company recommends enabling two-step authentication on email and online accounts to add an extra layer of security. Customers are also reminded never to share sensitive information without confirming the identity of the requester.
Origin has committed to keeping customers informed as the investigation progresses, and they encourage anyone seeking assistance to contact their dedicated incident line or email support. In this digital age, maintaining vigilance against cyber threats is essential, and Origin’s response highlights the importance of robust security measures.
