Origin Energy data breach exposes personal information of 900,000 customers

Origin Energy, an Australian integrated energy provider, confirmed that the recent data security incident compromised the sensitive personal information of nearly 900,000 current and former customers.

 

Origin Energy disclosed on June 22 that it identified a data security incident affecting its internal network. The company launched an investigation with external cybersecurity experts, secured affected systems, and notified relevant authorities, including the Australian Cyber Security Centre, Australian Federal Police, and the Office of the Australian Information Commissioner.

 

In a seperate update, Origin Energy said its investigation has revealed that the threat actors who infiltrated its internal network stole customers’ data including their names, addresses, dates of birth, contact phone numbers, account information, as well as the last four digits of credit cards and the last three digits of a bank accounts.

 

While initially the company did not share the number of affected individuals, in a recent update, Origin CEO Frank Calabria said that the company has identified approximately 900,000 current and former customers affected by the incident.

 

“We have now completed the initial phase of our review into Origin’s customer data security incident. 

 

“At this point in time, we believe the information of approximately 900,000 current and former customers was accessed.   

 

“Supporting affected customers is our key priority. We are contacting those customers whose information has been accessed and are providing support to them. We’ve extended our customer support hours and established a dedicated contact number for this incident. We are working with cyber security and forensic specialists to ensure the incident is contained, and we’ve taken a number of steps to secure our systems.  

 

“We continue to work very closely with the Australian Government and other agencies, including the Australian Cyber Security Centre, the National Office of Cyber Security and the Australian Federal Police. We have also notified the Office of the Australian Information Commissioner.  “Our review into this incident is continuing,” Mr Calabria added. 

 

Origin has made specialist identity and cyber support services available to all affected customers and established a dedicated helpline to address customer queries and provide assistance.