Origin Energy Hack Exposes Full Bank Account Numbers of 60 Customers
Synopsis
New details from Origin Energy’s investigation show that 60 customers had their full bank account numbers accessed, alongside wider personal data affecting about 900,000 people.
Origin Energy says about 60 customers had full bank account numbers accessed during a cyber incident in July that affected information relating to around 900,000 current and former customers.
The disclosure comes after the company examined the data that was affected by the breach.
The impacted information differed for customers. Origin said it added names, addresses, dates of birth, phone numbers, account information and information about customers' personal circumstances, and some records included the last four digits of credit cards or the last three digits of bank accounts.
Origin Confirms Scope of Customer Data Access
About 15,000 customers accessed numbers linked to government concession schemes or programs. The company's most recent update states that information from identifying documents was also accessed for approximately 100 customers.
Origin said that it has not been disclosed to the public that it is being used for making any statements. The criminal investigation is ongoing, and the company has substantially finished its review and is continuing to inform impacted customers.
The incident has been connected to a call centre in Manila and the investigation has included a former employee of Accenture, who has been working with Origin's call centres. In the wake of the breach, Origin has limited access to internal customer files and implemented further security measures.
Breach Comes After Stronger FY26 Cash Flow
The incident comes as Origin has reported its latest annual financial results. The energy company reported statutory earnings of A 1.574 billion in FY26, up from A 1.481 billion in FY25, while the adjusted free cash flow rose by A 867 million to A 2.074 billion.
The leak is one of the biggest that's been publicly disclosed with an Australian energy company. Origin is among a handful of major Australian firms to suffer big customer data breaches in recent years, joining Qantas, Medibank and Optus.
Australia's overall reporting of data breaches is also high. There were 1,205 breach notifications reported to the Office of the Australian Information Commissioner in 2025, 8% more than 2024 (1,112). The majority of notifications were due to malicious or criminal activity.
Source: The West Australian
Pooja Malik is a business journalist with over six years of experience covering startups, entrepreneurship, and emerging trends. She has previously worked with leading media platforms such as YourStory Media and BW BusinessWorld, where she reported on business, policy, and market developments. Currently, she serves as Editor at The Inspirepreneur Magazine, where she writes and edits stories across business, lifestyle, and travel, with a focus on clarity, accuracy, and reader relevance.
You Might Also Like
OpenAI $852B valuation questioned as investors flag rising AI costs
Oil Prices Rise Over 2% as Israel Expands Lebanon Operations
