Origin Energy said its initial review of a cybersecurity incident found that the personal information of approximately 900,000 current and former customers was accessed, making it one of the largest recent data breaches involving an Australian energy retailer.
Chief Executive Frank Calabria apologized to affected customers, saying the company’s immediate priority is supporting those impacted. Origin has begun contacting customers whose information was accessed, extended customer support hours, and established dedicated assistance channels while continuing its forensic investigation.
The company said it is working with cybersecurity and forensic specialists to contain the incident and has taken additional steps to secure its systems. Origin is also coordinating with the Australian Cyber Security Centre, the National Office of Cyber Security, the Australian Federal Police, and has notified the Office of the Australian Information Commissioner.
According to Origin, it had been investigating a potential security threat since early July but initially determined, based on the information available at the time, that the threat was not credible. On July 22, new information indicated that a security incident may have occurred, prompting the company to immediately notify the market and customers as a precaution.
Origin said the incident remains the subject of an active criminal investigation, limiting the amount of detail it can publicly disclose while inquiries continue.
The retailer has urged all customers—not only those directly affected—to remain alert for phishing attempts and other scams, advising them to avoid clicking unsolicited links, verify communications through official channels, avoid sharing passwords or financial information, and enable two-factor authentication where available.
The breach comes as Australian organizations continue to face heightened scrutiny over cybersecurity resilience following a series of high-profile attacks in recent years that have prompted tighter regulatory oversight and increased expectations around incident disclosure and customer protection.
This post appeared first on https://oilprice.com