**
In a concerning development for customers of Origin Energy, the company has confirmed that hackers have gained access to a trove of sensitive personal data. This breach has put at risk the names, addresses, dates of birth, phone numbers, and partial banking information of millions of customers across Australia. With approximately 4.8 million accounts under its belt, Origin Energy is now scrambling to understand the full scope of the breach and its implications for affected individuals.
Details of the Breach
Origin Energy, a key player in providing electricity, fossil gas, LPG, and internet services, revealed the breach in a statement released to the Australian Securities Exchange (ASX). The company has yet to disclose the specific number of customers impacted or the exact nature of the compromised data. However, they have acknowledged that the stolen information may include the last four digits of credit cards and the last three digits of bank accounts, although they are reassuring customers that this incomplete data cannot be used for direct transactions.
A person claiming responsibility for the hack has reportedly reached out to media outlets, alleging that the personal details of up to two million customers have been accessed. Origin has not confirmed these claims, but the situation has raised alarm bells about potential identity theft and fraud.
Company Response and Security Measures
Frank Calabria, the CEO of Origin Energy, expressed deep regret over the incident, stating, “I’m sorry this has happened. Customers trust Origin with their information, and I apologise for the impact this may cause.” The company is actively working with independent cyber security experts and law enforcement to secure its systems and prevent further unauthorised access.
Despite the ongoing investigation, Origin has not yet released details on how the breach occurred, which adds to the concerns of customers already on edge about the safety of their personal information.
Expert Insights on Potential Risks
Cyber security specialists have issued warnings regarding the potential misuse of the stolen data. Rumpa Dasgupta, a lecturer in cybersecurity at La Trobe University, highlighted that in the wrong hands, this data could fuel identity theft and even facilitate physical crimes such as burglary by pinpointing vulnerable households. With the rise in targeted phishing campaigns, customers are urged to remain vigilant against unsolicited communications that may exploit the breach.
The Australian Cyber Security Centre, alongside the Australian Federal Police and the Office of the Australian Information Commissioner (OIAC), is currently investigating the breach. The government’s National Office of Cyber Security is also leading the response to this significant incident.
A Broader Context of Cyber Security Threats
The breach at Origin Energy is part of a growing trend of data security incidents affecting Australian companies. In 2025 alone, the OIAC reported receiving 1,205 notifications of data breaches, with over half related to malicious activity. Just last year, a major data leak involving Qantas exposed the personal information of 5 million customers, raising concerns about the effectiveness of current data protection measures.
As organisations continue to grapple with the realities of cyber threats, the need for robust security protocols and customer awareness has never been more critical.
Why it Matters
The breach at Origin Energy serves as a stark reminder of the vulnerability of personal data in the digital age. With millions potentially affected, the incident not only jeopardises individual privacy but also shakes public confidence in corporate data handling practices. As cyber threats become increasingly sophisticated, it is imperative for companies to prioritise transparency and security to safeguard customer information and restore trust in the digital ecosystem.
