Origin Energy says hackers accessed data linked to about 900,000 current and former customers. Learn what information was involved and how you can reduce fraud and phishing risks today.
Table of Contents
What Happened?
The company announced the figure on July 28, 2026, after completing its initial review. A broader investigation is still underway.
Origin first reported a possible security incident on July 22. The company is now contacting affected customers and offering specialist identity and cybersecurity support.
The Origin breach is also a reminder that your information can be leaked through companies and services you trust. Many people do not discover a leak until they receive suspicious messages or notice unusual account activity.
If you are unsure whether your information was leaked elsewhere, automatic monitoring can help you spot problems earlier. Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.
Who Was Affected and What Data Was Leaked?
The breach affected approximately 900,000 current and former Origin customers.
The leaked information may include:
- Names
- Residential addresses
- Dates of birth
- Phone numbers
- Origin account information
- The last four digits of some credit cards
- The last three digits of some bank accounts
Origin said the incomplete card and bank details cannot independently make purchases or provide access to financial accounts.
However, criminals can combine partial financial details with your name, address, and birth date. This can make phishing messages or impersonation attempts more convincing.
Futureproof monitors your information for data leaks 24/7 and guides you with clear steps to keep it safer from scams.
Run a free checkHow Hackers Accessed Origin Customer Data
Origin has not publicly explained exactly how the criminals entered its systems. Therefore, the specific method or security weakness remains unknown.
The company is working with independent cybersecurity and forensic specialists to contain the incident and secure its systems.
Origin also contacted several Australian government agencies. These include the Australian Cyber Security Centre, Australian Federal Police, and Australia’s privacy regulator.
The ongoing criminal investigation limits what Origin can currently share about the attack.
At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
