Origin Energy revealed it was warned of a cyberattack accessing 900,000 customers' data three weeks before making the breach public. The company is notifying affected individuals, including former customers, and advising vigilance against scams.
The delayed disclosure raises concerns about Origin Energy's transparency and its handling of customer data security, potentially eroding trust and increasing the risk of scams for affected individuals.
Origin Energy has disclosed that it was aware of a cyberattack impacting approximately 900,000 current and former customers' personal data for three weeks before publicly announcing the breach. The company's chief executive, Frank Calabria, stated that initial warnings were received on July 2, but the threat was not confirmed as credible until July 22, when proof of data access was obtained.
Calabria informed reporters that the accessed data may include names, addresses, dates of birth, phone numbers, account details, and partial payment information. He apologized for the incident and urged customers to be vigilant against potential scams and suspicious activities. Origin Energy has secured its systems to prevent further breaches and is treating the matter as a criminal investigation, limiting the information it can currently disclose.
The company has 4.8 million customer accounts across Australia, providing services such as electricity, gas, and internet. Origin Energy has denied recent media speculation about reaching a deal with the alleged hacker to prevent data leaks, stating its investigation is ongoing.