Australian Energy Supplier Origin Confirms Cyberattack

Key Takeaways

• Australian energy provider Origin Energy confirmed a cyberattack leading to unauthorized access of customer data.
• Sensitive personal information, including names, addresses, dates of birth, phone numbers, and partial financial details, was exposed.
• The breach was identified on July 22, 2026, with confirmation of data exfiltration on July 23, 2026.
• Origin is collaborating with Australian government agencies (ACSC, AFP, OAIC) and external cybersecurity experts on investigation and remediation.

Origin Energy Confirms Data Breach Affecting Customer Information Systems

Origin Energy Limited, a prominent energy provider in Australia, has officially acknowledged a significant cybersecurity incident resulting in unauthorized access to customer data. This breach raises substantial concerns regarding the security of sensitive personal information and the resilience of critical national infrastructure.

On July 23, 2026, the company publicly disclosed that malicious actors had successfully penetrated portions of its customer information systems. This unauthorized access led directly to the exposure of sensitive personal data belonging to its customers.

While a comprehensive investigation remains underway, Origin has confirmed that the compromised data includes customer names, residential addresses, dates of birth, telephone numbers, and various account-related details. Furthermore, a limited amount of financial information may also have been exposed, specifically the final four digits of credit card numbers and the last three digits of bank account numbers.

Origin has clarified that these partial financial details are insufficient on their own to facilitate fraudulent transactions or gain direct access to customer accounts. However, the company acknowledges that this information could pose a risk if combined with other data sources obtained through separate means.

Incident Response and Remediation Efforts

The breach was initially detected on July 22, 2026, when Origin began investigating unusual activity within its digital infrastructure. At that preliminary stage, the company believed that complete financial information had not been compromised. Subsequent forensic analysis, however, definitively confirmed that unauthorized data access and exfiltration had indeed occurred.

Origin CEO Frank Calabria issued a public apology, emphasizing the gravity of the incident and its potential ramifications for affected customers. Mr. Calabria affirmed that safeguarding customer data remains Origin’s highest priority and assured that all impacted individuals would be directly notified as the full scope of the breach becomes clearer.

In immediate response to the incident, Origin has implemented robust containment and remediation measures designed to thwart any further unauthorized system access. The company has also enlisted independent cybersecurity specialists to provide expert assistance with the forensic investigation, threat analysis, and the hardening of its systems. These efforts are being conducted in close coordination with relevant Australian government agencies.

Key authorities involved in the collaborative response include the Australian Cyber Security Centre (ACSC), the Australian Federal Police (AFP), and the Office of the Australian Information Commissioner (OAIC). The multi-agency involvement underscores the serious nature of this incident, suggesting potential regulatory scrutiny and legal oversight.

Customer Support and Vigilance

To support affected customers, Origin has established dedicated communication channels and extended its customer service availability, including weekend support hours. Customers are strongly advised to exercise heightened vigilance against suspicious communications, such as phishing attempts or potential identity fraud, which frequently emerge following breaches involving personally identifiable information.

While Origin has not yet disclosed the total number of customers impacted, this incident serves as a stark reminder of the persistent cybersecurity threats confronting the energy sector. Utility providers, as critical infrastructure entities, are increasingly targeted by threat actors, and attacks on them can lead to broader implications, including service disruptions and supply chain vulnerabilities. Origin has not publicly attributed the attack to a specific threat group nor identified the initial attack vector. However, the involvement of national cybersecurity authorities indicates that the ongoing investigation may extend to attribution and threat actor tracking.

Further updates regarding the scale of the breach, affected systems, and additional mitigation steps are anticipated as the investigation progresses. This incident reinforces the critical importance of robust cybersecurity controls, continuous monitoring, and agile incident response capabilities for protecting sensitive customer data within essential sectors.

What You Should Do

• Monitor your financial statements and credit reports regularly for any suspicious activity.
• Be extremely cautious of unsolicited communications, especially those claiming to be from Origin Energy, and verify their legitimacy through official channels before clicking links or sharing information.
• Consider enabling multi-factor authentication (MFA) on all your online accounts, particularly those linked to financial services.
• Change passwords for any accounts that reuse credentials similar to those you might have used with Origin Energy.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.