Darkwebdecoded Origin Energy Data Breach: 900,000 Customers Affected, No Dark Web Evidence Yet
Article Content
- •900,000 customers affected by the data breach, with sensitive information exposed.
- •No evidence of data being published on the dark web as of October 14, 2026.
- •Origin Energy faced criticism for a 20-day delay in notifying affected customers.
Origin Energy reported a data breach affecting approximately 900,000 customers and former customers, with exposed data including names, addresses, and dates of birth. Additionally, full bank account numbers for around 60 customers and identity document numbers for about 100 customers were accessed. Despite the breach occurring in July 2026, the company has not found evidence of the stolen data being published on the dark web as of October 14, 2026. Origin Energy chairman Scott Perkins emphasized the ongoing risk of future publication and urged affected customers to remain vigilant. The company faced criticism for a 20-day notification delay, as customers were informed of the breach only on July 22, despite Origin becoming aware of it on July 2. The CEO did not address the breach during his shareholder address, focusing instead on energy policy reforms. Origin has since upgraded its cybersecurity systems to mitigate future risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Accenture in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of data were compromised?
What should affected customers do?
What actions has Origin taken since the breach?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…