{"id":"origin-energy-customer-breach-jul-2026","category":"breach","status":"closed","title":"Origin Energy breach exposes information of approximately 900,000 current and former customers","tldr":"Origin Energy’s breach affected approximately 900,000 current and former customers, including some bank, identity and concession numbers. Read your individual notification, use the offered monitoring and independently verify unexpected messages.","summary":"Origin Energy disclosed a potential breach on 22 July and subsequently confirmed unauthorised access and disclosure affecting approximately 900,000 current and former customers. Exposed information varied by person and included names, addresses, dates of birth, phone numbers, account details and information about personal circumstances. Most affected financial details were partial numbers, but the August review identified approximately 60 full bank account numbers, 100 identity document numbers and 15,000 government concession or programme numbers. Some other contacts listed on accounts were also affected. Origin strengthened its systems, contacted affected customers and offered identity support and credit monitoring. On 21 August, it said personalised notifications were progressing and the criminal investigation remained ongoing; it also told ABC that customer data had not been publicly released. No later substantive update or public criminal outcome was found by 3 November. Misuse of the accessed information for subsequent fraud has not been established by the sources reviewed.","action":"Current and former Origin customers should read their individual notification and follow its tailored advice, including taking up the offered identity support and 12 months of free credit monitoring. Verify unexpected calls, emails or texts through official channels, and never disclose passwords. For help identifying what was exposed and what to do, contact Origin’s dedicated incident line on +61 8 9922 7000.","product":"Origin Energy customer accounts","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["origin-energy","australia","data-breach","personal-data","identity-theft"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Update on data security incident","url":"https://www.originenergy.com.au/about/investors-media/update-on-data-security-incident-aug21/","by":"Origin Energy","date":"2026-08-21"},{"kind":"advisory","title":"Further update on data security incident","url":"https://www.originenergy.com.au/about/investors-media/further-update-on-data-security-incident/","by":"Origin Energy","date":"2026-07-28"},{"kind":"advisory","title":"Update on data security incident","url":"https://www.originenergy.com.au/about/investors-media/update-on-data-security-incident/","by":"Origin Energy","date":"2026-07-23"},{"kind":"news","title":"Origin Energy believes 900,000 customers' data accessed in breach","url":"https://www.abc.net.au/news/2026-07-28/origin-energy-data-breach-900k-customers-impacted/106961804","by":"ABC News","date":"2026-07-28"},{"kind":"news","title":"Dozens of Origin Energy customers' full bank details, ID numbers accessed in July breach","url":"https://www.abc.net.au/news/2026-08-21/origin-energy-hack-update-60-customers-bank-account-access/107062636","by":"ABC News","date":"2026-08-21"},{"kind":"news","title":"Australian energy provider Origin says data breach exposes client data","url":"https://www.bleepingcomputer.com/news/security/australian-energy-provider-origin-says-data-breach-exposes-client-data/","by":"BleepingComputer","date":"2026-07-23"}],"started":"2026-07-22","closed":"2026-08-21","created":"2026-11-03T20:27:23.479Z","updated":"2026-11-03T20:27:23.479Z","cve_notes":[],"timeline":[{"at":"2026-08-21","added":"2026-11-03T20:12:05.486Z","kind":"other","text":"Origin told ABC News that the alleged attacker had not publicly released customer data. ABC also reported that investigators had linked the breach to a former Accenture employee at a Manila call centre.","url":"https://www.abc.net.au/news/2026-08-21/origin-energy-hack-update-60-customers-bank-account-access/107062636","by":"ABC News","patch":null},{"at":"2026-08-21","added":"2026-11-03T20:12:05.486Z","kind":"other","text":"Origin said its customer-level review was substantially complete, all approximately 900,000 affected customers had been contacted, and further personalised notifications were well advanced. It had strengthened security and offered identity monitoring and 12 months of free credit monitoring; the criminal investigation remained ongoing.","url":"https://www.originenergy.com.au/about/investors-media/update-on-data-security-incident-aug21/","by":"Origin Energy","patch":null},{"at":"2026-08-21","added":"2026-11-03T20:12:05.486Z","kind":"vendor-revised","text":"Origin identified additional exposure affecting approximately 60 customers’ full bank account numbers, 100 customers’ identity document numbers and 15,000 customers’ government concession or programme numbers. No scanned identity documents or concession cards were affected.","url":"https://www.originenergy.com.au/about/investors-media/update-on-data-security-incident-aug21/","by":"Origin Energy","patch":null},{"at":"2026-07-28","added":"2026-11-03T20:12:05.486Z","kind":"vendor-revised","text":"Origin estimated that approximately 900,000 current and former customers were affected and began contacting them. It said authorities were investigating the incident as a criminal matter.","url":"https://www.originenergy.com.au/about/investors-media/further-update-on-data-security-incident/","by":"Origin Energy","patch":null},{"at":"2026-07-23","added":"2026-11-03T20:12:05.486Z","kind":"vendor-revised","text":"Origin confirmed unauthorised access and disclosure of customer information. Its initial description included personal and account details, plus the last four credit card digits or last three bank account digits.","url":"https://www.originenergy.com.au/about/investors-media/update-on-data-security-incident/","by":"Origin Energy","patch":null},{"at":"2026-07-22","added":"2026-11-03T20:12:05.486Z","kind":"disclosed","text":"Origin announced a potential customer data breach after receiving new information. It later said it had investigated a threat since early July but initially judged it not credible.","url":"https://www.originenergy.com.au/about/investors-media/further-update-on-data-security-incident/","by":"Origin Energy","patch":"na"}],"url":"https://hard.fyi/live/origin-energy-customer-breach-jul-2026/","json":"https://hard.fyi/api/live?id=origin-energy-customer-breach-jul-2026"}