Australia’s largest energy retailer, Origin Energy, disclosed on July 23, 2026 that an unauthorized party accessed and stole some customer data. The company confirmed the breach in a filing to the Australian Stock Exchange after a hacker reportedly circulated a sample of stolen records. Origin serves 4.8 million residential and business accounts across Australia, making this one of the largest data exposures in the country this year.
The stolen data includes names, home addresses, phone numbers, and account information. Origin later confirmed that partial financial details — the last few digits of credit card numbers or bank account numbers — were also in the accessed data, contradicting an earlier statement that financial information was not involved. Origin says it has notified the Australian Federal Police and the Australian Cyber Security Centre and is working with independent cyber experts to contain the incident and establish exactly how many customers were affected.
How to check if you’re affected
Affected products include the Origin Energy customer account portal and the Origin app. If you are a current or former Origin Energy customer in Australia, assume your contact and partial account details may be in scope. Origin has committed to notifying impacted customers directly — look for an official email from originenergy.com.au and be cautious of follow-up scams using your name and address (a common tactic after a breach). Do not click links in unsolicited texts or emails claiming to be from Origin; go directly to their website instead.