SerpApi.Org
- Origin Energy is investigating a hack
- Customer information was leaked
Millions of Australians may have had data accessed by hackers after Origin Energy confirmed it is investigating a cybersecurity incident.
The energy giant is aware of an incident where unauthorised access to customer data may have been granted, it said in a statement to the ASX on Wednesday afternoon.
However, the company said it does not believe the data that was breached includes customer credit card or bank details.
'We understand an incident like this may raise concerns and acknowledge the impact of this uncertainty on Origin customers,' it said.
'Our investigations into this incident are occurring as a matter of urgency, and Origin will provide further updates as appropriate.'
Origin has 4.8 million customer accounts in Australia and provides electricity, natural gas, LPG, and internet services to residential and business customers.
Depending on the severity of the breach, it could be one of the biggest cyberattacks Australia has faced following similar strikes on Optus, Medibank and Qantas.
The investigation into the attack was started when The Australian received an apparent email from a hacker on Tuesday.
They claimed Origin had been ignoring their emails for almost three weeks regarding the access of their customers' data.
As proof, they included a sample of 50 customers' records. That information included names, email, phone numbers, addresses, billing history and dates of birth.
'Despite my outreach to their board members, security teams, and customer care departments, Origin hasn't made a public announcement about the breach or responded to negotiate next steps,' the suspected hacker wrote.
'They've shown no interest in resolving it before the data goes public.'
The email to The Australian was sent using a normal Gmail account, which was passed onto Origin.
It's understood Origin responded to the hacker's first email and asked for evidence of the leak, which the hacker didn't supply.
The company says it has notified the AFP, the Australian Cyber Security Centre and the Office of the Australian Information Commissioner about the incident.
Shares in the company had dropped nearly three per cent from the open at 1.30pm.
Origin is expected to share an update on Thursday morning.
The suspected hacker claimed to have contacted board members, security teams, and customer care departments about the leak on July 2.
They contacted The Australian because 'Origin failed to initiate contact and resolve this matter privately'.
The overall tone of the email has polite with the hacker signing 'best regards' at the end.
It's understood no ransom has been demanded, yet.
Australian companies, and individuals, have increasingly become a target for domestic and international hackers.
The Office of the Australian Information Commissioner recorded 1,205 data breach incidents in 2025, eight per cent higher than in 2024.
The Australian Institute of Criminology and Australian Cyber Security Centre estimates a cybercrime is committed every six minutes.
Origin has not shared how it is investigating the breach but has engaged the help of forensic experts.
Read more
