Origin Energy Reports Data Breach Affecting Millions of Customers

Origin Energy has disclosed a significant data breach affecting around 2 million customers, following claims from an alleged hacker known as 'John Doe.' The hacker asserted that they accessed the company's customer systems and stole personal data, including names, addresses, dates of birth, phone numbers, and partial payment information. In an email to Australian media, the hacker expressed frustration over the company's lack of response to their outreach regarding the breach.

In response to the claims, Origin Energy has initiated an urgent investigation to determine the extent of the unauthorized access. The company confirmed that some customer data had been compromised and is working to identify those affected. In a statement released on July 23, Origin Energy acknowledged the breach and assured customers that they would be contacted if their information was confirmed to be at risk.

The compromised data may include sensitive information such as names, addresses, dates of birth, contact numbers, and account details, along with the last four digits of credit cards or the last three digits of bank accounts. However, the company emphasized that the incomplete financial information cannot be used for transactions or account access.

As one of Australia's largest integrated energy companies, Origin Energy serves approximately 4.8 million customers and operates in both the electricity and natural gas sectors. The firm is collaborating with external cybersecurity experts to investigate the breach thoroughly. Additionally, it has notified relevant authorities, including the Australian Cyber Security Centre, the Australian Federal Police, and the Office of the Australian Information Commissioner, about the incident.

Despite the breach, Origin Energy stated that its operations remain unaffected. The hacker has reportedly given the company a 14-day deadline to respond, threatening to release the stolen data if no agreement is reached.