Origin Energy Investigates Data Breach Affecting Millions of Customers

Origin Energy Limited is investigating a major cybersecurity breach after a hacker claimed to have accessed the personal details of up to 2 million customers. The company notified the Australian Securities Exchange, the Australian Cyber Security Centre, the Australian Federal Police, and the Office of the Australian Information Commissioner on July 22, 2026. An alleged hacker contacted the media, providing samples of customer records to the ABC and The Australian, including names, addresses, emails, dates of birth, and billing history.

While the company initially stated it did not believe bank or credit card details were compromised, later updates acknowledged that the last four digits of credit cards or the last three digits of bank accounts may have been accessed. Origin Energy subsequently emailed millions of customers to notify them of the incident. The breach is believed to be the largest known data leak involving an Australian energy retailer.

Chief Executive Frank Calabria apologized for the event, stating that securing systems and preventing further unauthorized access are key priorities. Retail Executive General Manager Jonathan Briskin also issued an apology regarding the uncertainty caused by the ongoing investigation. Following the announcement, the company's share price dropped nearly 3%. If the breach is confirmed to be the result of inadequate security, Origin Energy could face fines of up to $50 million or 30% of its revenue.