Personal and banking details among customer data stolen in Origin Energy hack

Wanderstayfinder.com – “`html

Personal and Banking Details Among Customer Data Stolen in Origin Energy Hack

Personal and banking details among millions of Origin Energy customers’ information have been compromised following a significant cybersecurity breach. The energy giant confirmed that addresses, phone numbers, and partial bank account data were accessed by unauthorized parties. With approximately 4.8 million customer accounts across Australia, Origin Energy provides electricity, fossil gas, LPG, and internet services to residential and commercial clients nationwide. The company has not yet disclosed the exact number or specific categories of customers whose information was affected.

What Information Was Compromised?

Personal and banking details among the stolen data include customers’ full names, residential addresses, dates of birth, telephone numbers, and Origin account information. Additionally, the breach may have exposed the last four digits of credit cards or the last three digits of bank accounts. In a statement submitted to the Australian Securities Exchange on Thursday, Origin Energy pledged to notify affected customers once verification was complete. A self-proclaimed hacker has reportedly reached out to various media organizations with unverified assertions that approximately 2 million customers’ personal information was accessed during the incident.

The company emphasized that incomplete credit card or bank account information cannot be utilized to make purchases or gain access to financial accounts. Origin initially announced the security breach in a statement released yesterday, indicating that complete credit card or banking details had likely not been compromised. However, the company has not yet provided specific details regarding how the hack occurred or which systems were targeted.

Expert Analysis and Customer Protection

Origin Energy’s chief executive, Frank Calabria, announced that the company is actively securing its systems and preventing any further unauthorized access. Working alongside independent cybersecurity experts and law enforcement authorities, Calabria expressed his sincere apologies. “I’m sorry this has happened,” Calabria stated. “Customers trust Origin with their information, and I apologise for the impact this may cause.” Cybersecurity professionals have cautioned that customers could face increased vulnerability if the stolen data is leaked and exploited for identity theft or by scammers posing as legitimate business representatives.

Rumpa Dasgupta, a lecturer in cybersecurity at La Trobe University, highlighted that personalised records could be misused for physical robberies. “In the wrong hands, this information could be exploited not only for highly targeted phishing campaigns but also to support physical crimes such as burglary by identifying vulnerable properties,” Dasgupta explained.

Personal and banking details among the compromised information have prompted multiple regulatory bodies to launch investigations. Origin Energy confirmed that the Australian Cyber Security Centre, the Australian Federal Police, and the Office of the Australian Information Commissioner are all examining the breach. The National Office of Cyber Security is coordinating the government’s overall response to the incident.

The Australian Federal Police declined to comment on whether investigators had identified or communicated directly with Origin’s alleged hackers. According to The Australian newspaper, authorities were first contacted by a person claiming responsibility for the hack on Tuesday. Following this initial contact, the newspaper alerted Origin Energy, which subsequently issued a public statement on Wednesday.

An Origin spokesperson confirmed that the company moved immediately to update the ASX as soon as it became aware of the potential security incident. The Office of the Australian Information Commissioner reported receiving 1,205 data breach notifications throughout 2025, with 716 cases directly related to malicious or criminal activity. Notably, among these incidents was a significant leak affecting 5 million Qantas customers’ information in October, which prompted warnings that scammers could cold call numbers from the leaked database.

The federal privacy commissioner recently determined that Qantas did not commit any omissions or failings in breach of the Privacy Act concerning their data breach. The Australian federal police continue to investigate both incidents. Customers are advised to remain vigilant and monitor their financial accounts for any suspicious activity related to the compromised personal and banking details among Origin Energy’s customer database.

“`