Origin energy finishes review into cyber breach affecting 900,000 customers

Origin Energy has substantially completed its review into a data breach affecting roughly 900,000 current and former customers, confirming that full bank account details were accessed for a small group of accounts.

The energy retailer first reviewed a potential threat in early July 2026, which it initially assessed as not credible before new information emerged on 22 July indicating an incident had occurred.

For the vast majority of the 900,000 customers, the accessed information included names, addresses, dates of birth, phone numbers, account details, and partial financial information — specifically the last four digits of credit cards or the last three digits of bank accounts.

A smaller group suffered more extensive exposure. Origin confirmed unauthorised access to full bank account numbers for approximately 60 customers, ID document numbers for about 100 customers, and government concession scheme numbers for roughly 15,000 customers. No scanned copies of cards or identity documents were affected.

The incident remains under an ongoing criminal investigation involving the Australian Federal Police, the Australian Cyber Security Centre, the National Office of Cyber Security and the Office of the Australian Information Commissioner.

Origin chief executive Frank Calabria said the company was confident in its response and was focused on completing notifications to individual customers.

"To our customers, I am sorry. We don't take for granted the trust customers place in Origin and our safeguarding of their information," Calabria said in a statement released during the response.

Origin has offered affected customers identity monitoring and 12 months of free credit monitoring, while warning customers to watch for scams and impersonation attempts.