Origin Energy reports cyber attack, customer data stolen in network breach

Origin Energy, an Australian integrated energy provider, recently reported a major cyber security incident in which malicious actors compromised its internal systems and obtained customer information.

 

Headquartered in Sydney, Origin Energy is one of Australia’s largest energy providers, serving approximately 4.2 million electricity, natural gas, and LPG customers. The company operates across the energy supply chain, including power generation, energy retailing, oil and gas exploration, and renewable energy solutions.

 

On June 22, in a data security incident notice published on its website, Origin Energy said that it recently identified a data security incident affecting its internal network. The company immediately launched an investigation, with assistance from external cyber security experts, to determine the scope of the incident.

 

Origin Energy said it has taken immediate measures to secure the affected systems and has engaged relevant authorities, including the Australian Cyber Security Centre and the Australian Federal Police, to investigate the incident. The company has also notified the Office of the Australian Information Commissioner about the breach.

 

In a seperate update, Origin Energy said its investigation has revealed that the threat actors who infiltrated its internal network stole customers’ data including their names, addresses, dates of birth, contact phone numbers, account information, as well as the last four digits of credit cards and the last three digits of a bank accounts.

 

The company is currently working to determine the total number of affected customers and will notify impacted individuals once they have been identified.

 

In a statement, Origin’s CEO Frank Calabria said, “I’m sorry this has happened. Customers trust Origin with their information, and I apologise for the impact this may cause. 

 

“We are contacting affected customers, offering support and have set up a dedicated contact number and additional resources to help manage our response to this incident.  

 

“One of our key priorities is taking action to secure our systems and ensure no further unauthorised access. We are working with independent cyber experts to support Origin, and that work is continuing alongside the work of authorities,” Calabria added.