Personal and banking details stolen in Origin Energy hack
Australian energy company Origin Energy has confirmed a hack that exposed customer data including addresses, phone numbers, and partial bank account information.
Origin Energy, which serves 4.8 million customer accounts in Australia providing electricity, natural gas, LPG, and internet services, has disclosed a data breach. The company has not yet specified which or how many customers are affected but promised to notify those impacted once confirmed.
Potentially exposed data includes customers' names, addresses, dates of birth, phone numbers, account information, and the last four digits of credit cards or last three digits of bank accounts. Origin stated that incomplete financial data cannot be used to make purchases or access accounts.
Initially, Origin believed credit card or bank details had not been accessed, but later confirmed partial financial information may have been taken. The company has not detailed how the hack occurred.
CEO Frank Calabria apologised, saying customers trust Origin with their information. He assured that systems are being secured with help from independent cyber experts and authorities to prevent further unauthorised access.
Investigations are underway by the Australian Cyber Security Centre, the Australian Federal Police, and the Office of the Australian Information Commissioner (OIAC). The OIAC reported 1,205 data breach notifications in 2025, with 716 related to malicious or criminal activity.
