Hackers access Australian customers’ names, addresses, dates of birth, phone numbers and some bank account details, company states Origin Energy customers’ addresses, phone numbers and partial bank account data have been accessed in a hack, the company has affirmed. The firm has 4. 8m customer accounts in Australia, providing electricity, fossil gas, LPG and internet services to homes and businesses.
Origin has yet to confirm which, and how many, customers had been affected. In an official statement to the ASX on Thursday, it stated it would tell customers once it affirmed whether they had been affected. A person claiming to be the hacker has reportedly contacted media outlets with unverified asserts that 2 million customers’ details were accessed.
Origin stated data may include customers’ names, addresses, dates of birth, phone numbers and Origin account information, as well as the last four digits of a credit card, or the last three digits of a bank account. The company stated incomplete credit card or bank account information could not be used to make purchases or access accounts. Origin first disclosed the hack in an official statement yesterday, stating it believed credit card or bank details had not been accessed.
The company has not detailed how the hack occurred. Origin’s chief executive, Frank Calabria, stated the company was securing its systems and ensuring there was no further unauthorised access, working with independent cyber experts and authorities. “Customers trust Origin with their information, and I apologise for the impact this may cause.”
Experts have cautioned customers could be vulnerable if the data is leaked and used for identity theft, or by scammers tricking people into believing they are representatives of real businesses. Rumpa Dasgupta, a lecturer in cybersecurity at La Trobe University, stated personalised records could be misused for physical robberies. “In the wrong hands, this information could be exploited not only for highly targeted phishing campaigns but also to support physical crimes such as burglary by identifying vulnerable properties,”Dasgupta stated.
Origin stated the Australian Cyber Security Centre, the Australian federal police and the Office of the Australian Information Commissioner (OIAC) were all investigating. The National Office of Cyber Security is leading the government’s response. The AFP declined to comment on whether it had identified or communicated with Origin’s hackers.
The Australian reported it was first contacted by a person claiming to have hacked Origin on Tuesday, after which the newspaper alerted Origin, which made a statement on Wednesday. An Origin spokesperson stated the company had moved immediately to update the ASX as soon as it was aware of a potential incident. The OIAC reported it received 1,205 data breach notifications in 2025, of which 716 were related to malicious or criminal activity.
Among the hacks was a leak of 5 million Qantas customers’ information in October, which prompted warnings scammers could cold call leaked phone numbers. The federal privacy commissioner last week found Qantas did not make any omissions or failings in breach of the Privacy Act, in relation to the hack. The Australian federal police are investigating.
If you have something to share about this story, you can contact Guardian Australia’s news teams using one of the following methods: The Guardian app has a tool to send tips about stories. Messages are end to end encrypted and concealed within the routine activity that every Guardian mobile app performs. This prevents an observer from knowing that you are communicating with us at all, let alone what is being stated.
If you don’t already have the Guardian app, download it (iOS/Android) and go to the menu. Select ‘Secure Messaging’. If you don't need strong security you can write to a Guardian Australia journalist using the details here.
Click on a person to see their details. For end to end encrypted email you can create a free Proton Mail account and email gaus. contact@protonmail.
com. You can use the encrypted messaging apps Signal or WhatsApp to message us at +61 490 758 250. Finally, our guide at theguardian.
com/tips lists several ways to contact us securely, and discusses the pros and cons of each.