Australian Consumers Urged to Question Data Practices After Origin Energy Breach

Cybersecurity experts are urging Australians to actively question how companies store and protect personal data. Under the Privacy Act 1988, the Office of the Australian Information Commissioner (OAIC) grants individuals the right to request details on data collection, encryption, retention periods and third‑party sharing. Experts stress that asking such questions is a standard consumer right and helps verify compliance with the Notifiable Data Breaches (NDB) scheme.

In parallel, Origin Energy, the nation's largest electricity and gas retailer, disclosed a breach that may have exposed personal information of up to two million customers, including names, addresses, dates of birth, contact numbers and partial payment‑card or bank‑account details. While the company has not confirmed the exact scope, the leak could enable more sophisticated phishing attacks, especially as cybercriminals employ generative AI to swiftly analyse large data sets and craft highly personalised scams.

Consumers are advised to remain vigilant for suspicious communications and to demand transparency from any service provider about its data‑security measures.