Origin Energy Limited, a major player in Australia's energy sector, has confirmed a significant data breach that potentially impacts millions of its customers. Based in Sydney, Origin is known for its role in electricity and gas retail, as well as power generation and renewable energy. The breach came to light on July 22, when the company began an investigation into suspicious activity involving customer data. Just a day later, Origin acknowledged unauthorized access to some customer information, although the full extent of the breach remains under investigation.
The compromised data may include personal identifiers such as names, addresses, and dates of birth, along with phone numbers, account details, and partial payment card or bank account numbers. In response, Origin is actively reaching out to affected customers and has enlisted the help of external cybersecurity experts. Additionally, the company has informed Australian law enforcement and relevant cybersecurity and privacy agencies.
Despite the breach, Origin has reassured stakeholders that its production and critical operations remain unaffected. An individual claiming responsibility for the attack has contacted a news outlet, alleging the theft of data belonging to 2 million people and threatening to leak the information unless a ransom is paid. Origin Energy, with a customer base of approximately 4.8 million, continues to investigate the incident.
In response to media inquiries, an Origin spokesperson highlighted ongoing media speculation and confirmed that their investigation is still underway, with no new information available at this time.