Origin Energy revealed a data breach impacting approximately 900,000 current and former customers on July 28, 2026, affecting names, addresses, dates of birth, phone numbers, account data, and partial credit card or bank account numbers [1, 2, 3].
The company holds about 4.8 million customer accounts across Australia as of the end of 2025, meaning nearly one in five accounts were compromised in the breach [1, 2, 3].
Origin Energy first received warning emails on July 2 claiming access to customer data but found no evidence at that time [1]. On July 22, it received proof of unauthorized access and promptly announced the breach [1].
The CEO Frank Calabria apologized to affected customers, saying, "We are sorry. We don’t take for granted the trust customers place in Origin and we’re here to support them" [1].
Origin is working closely with cybersecurity and forensic experts to investigate the extent of the breach and contain any damage. The company is cooperating with the Australian government and has reported the incident to the Australian Information Commissioner’s Office [2, 3].
Speculation in the media about any ransom payments was dismissed by Origin Energy [1].
Origin Energy continues to advise customers to remain vigilant against scams and unauthorized activity. The company is providing support services as it investigates the breach and strengthens its cyber defenses [1, 2].
