Back Originenergy.Au

Potential customer data security incident

Originenergy.Au • July 22, 2026

Origin Energy Limited is currently investigating a potential security incident which may involve unauthorised access to our customers’ data.

Origin Energy Limited (Origin) is currently investigating a potential security incident which may involve unauthorised access to some customers’ data. We do not believe the impacted data includes customer credit card or bank details. We understand an incident like this may raise concerns and acknowledge the impact of this uncertainty on Origin customers. Our investigations into this matter are occurring as a matter of urgency, and Origin will provide further updates as appropriate. We have engaged the Australian Cyber Security Centre and the Australian Federal Police this potential incident. We have also engaged with the Office of the Australian Information Commissioner.

Scam emails and texts are getting harder to spot. Learn the tell-tale signs of a fake Origin message and what to do if you get one.

We have a number of ways you can reach us. Visit our us page if you need support.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Origin Energy Investigates Major Data Breach Affecting Millions of Customers Origin Energy is investigating a potential cybersecurity incident involving unauthorized access to customer data, reportedly affecting up to two million Australians. An alleged hacker, identifying as 'John Doe', claims to have accessed personal details including names, addresses, and account information. The company has confirmed it does not believe sensitive data such as credit card or bank details were compromised. Origin has notified the Australian Cyber Security Centre and the Australian Federal Police, and is engaging with the Office of the Australian Information Commissioner. The hacker has threatened to release the data publicly unless a resolution is reached within 14 days. This incident follows a recent rise in cyberattacks targeting major Australian companies, raising significant concerns about data security and customer trust. Origin's shares dropped nearly 3% following the announcement, reflecting investor anxiety over the breach. 57 sources 66

Extracted Entities

Potential customer data security incident

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)