An overview of disclosures surrounding Origin Energy's data breach affecting 900,000 customers, examining the types of data exposed, public statements from leadership regarding dark web publication, and the timeline for notifying affected individuals.
Who was affected and what was leaked?
The incident, which was revealed in July 2026, exposed the names, addresses and dates of birth of the vast majority of 900.000 customers. For a smaller group of around 60 people, the perpetrators gained access to their full bank account numbers. In addition, for around 100 customers, numbers from official identity documents, such as passports or driver's licenses, were leaked.
The progress of the investigation and the delay in notifications
The company discovered the potential breach on July 2, 2026, but the first notifications to customers began on July 22. The CEO, Frank Calabria, defended the 20-day period, explaining that it took time to confirm the accuracy of the information, while making no mention of the incident in his speech to shareholders.
In August 2026, reports suggested that investigations indicated that the problem may have been started by an off-site employee at Accenture, the company that manages Origin's IT systems. However, Origin has not publicly confirmed this, and Accenture has not commented.
READ ALSO
OpenAI engineering team leader arrested, accused of attempted wiretapping
What should those affected pay attention to?
Experts recommend that affected customers remain vigilant:
- Monitor their bank accounts for unusual movements.
- Be careful of scam messages or phone calls that may use their personal information.
- Check their credit profile for suspicious activity.
- Contact the relevant data and consumer protection authorities for any concerns.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
Top comments (0)