Origin Energy hack exposes customer personal and banking details

Australian energy retailer Origin Energy has confirmed that hackers accessed the personal and banking details of an undisclosed number of customers in a recent cyberattack. The company said the breach involved names, addresses, dates of birth, phone numbers, and some bank account numbers, though it did not specify how many accounts were compromised.

The hack affects Origin Energy's 4.8 million customer accounts in Australia, which include households and businesses that use the company's electricity, natural gas, LPG, and internet services. The company stated that it is contacting affected customers directly and has reported the incident to the Australian Cyber Security Centre and the Office of the Australian Information Commissioner.

The breach matters because stolen personal and financial data can be used for identity theft, fraud, or targeted phishing scams. Origin Energy warned customers to be vigilant for suspicious emails, calls, or messages that might attempt to exploit the stolen information.

Origin Energy did not disclose the exact date of the hack or how the attackers gained access, but it said the breach was detected on an unspecified date and that it immediately took steps to secure its systems. The company also noted that it has engaged external cybersecurity experts to investigate the incident.

This is not the first major data breach in Australia's energy sector. In 2022, electricity provider EnergyAustralia suffered a similar attack that exposed customer data. The Australian government has since introduced stricter data breach notification laws, requiring companies to report incidents promptly.

Origin Energy said it is working to strengthen its security measures to prevent future breaches and advised customers to monitor their accounts for unusual activity. The company also recommended that customers change their passwords and enable multi-factor authentication where available.