Origin Energy Breach Exposes 900,000 Customer Records

Origin Energy confirmed on July 28, 2026, that a cybersecurity breach exposed the personal information of approximately 900,000 current and former customers. The leaked data includes names, addresses, dates of birth, phone numbers, account details, and partial credit card and bank account numbers. This confirmed number is lower than an initial claim by an alleged hacker who asserted that two million files were accessed.

The company first reviewed a potential threat in early July but initially dismissed it as non-credible. Origin Energy revised this assessment on July 22 after new information emerged. Chief Executive Frank Calabria apologized for the incident and announced that the company is providing identity protection and cyber support services to affected individuals.

Origin Energy is currently coordinating with the Australian Federal Police and the Australian Cyber Security Centre to investigate the incident as a criminal matter. Calabria warned that other actors might exploit the breach by impersonating the company to conduct scam activity.