Origin Energy data breach exposes millions of Australian customers

Origin Energy, one of Australia’s largest electricity providers serving about 4.8 million households, confirmed an unauthorized intrusion into its customer management system on 23 July 2026. The company announced the breach via an ASX disclosure after an earlier tentative notice, stating that personal information of an undisclosed number of customers had been accessed and exposed.

The data reportedly includes names, addresses, dates of birth, contact numbers, account details and partial payment information such as the last four digits of credit cards or the last three digits of bank accounts. The suspected hacker, identified as a former employee using internal login credentials, allegedly accessed the system supplied by Kraken. While the exact number of affected customers has not been verified, media reports suggest up to two million records may have been compromised.

Authorities and security experts warned that the stolen information could be used for targeted scams. Customers have been advised to monitor financial accounts, enable additional authentication measures, and be vigilant for phishing attempts.