Key facts
- Origin Energy customers' personal and partial banking data were accessed in a hack.
- Affected data may include names, addresses, dates of birth, phone numbers, and Origin account information.
- Partial credit card or bank account details were also accessed.
- Origin Energy has 4.8 million customer accounts in Australia.
- The company is working with cyber experts and authorities, including the Australian Cyber Security Centre, AFP, and OIAC.
Origin Energy has confirmed that a cyberattack has resulted in the compromise of personal and partial banking details of its customers. The company, which serves 4.8 million accounts across Australia with electricity, natural gas, LPG, and internet services, stated that impacted data could include names, addresses, dates of birth, contact phone numbers, and Origin account information.
Additionally, the last four digits of credit card numbers or the last three digits of bank account numbers may have been accessed. Origin Energy has emphasized that this incomplete financial information cannot be used to make purchases or access accounts. The company initially revealed the hack on Wednesday, initially stating that credit card or bank details were believed to be unaffected.
Chief Executive Frank Calabria apologized for the incident and stated that the company is working to secure its systems and prevent further unauthorized access. Origin Energy is collaborating with independent cyber experts and has notified relevant authorities, including the Australian Cyber Security Centre, the Australian Federal Police, and the Office of the Australian Information Commissioner (OIAC), all of which are investigating the breach. The Australian newspaper reported being contacted by an individual claiming responsibility for the hack prior to Origin Energy's public statement.