Origin Energy Data Breach: 60 Customers' Bank Details Hit

Origin Energy has confirmed that approximately 60 customers had their full bank account numbers accessed, and around 100 customers had an identification document number accessed, in a July cyberattack, the company said in an update reported by ABC News. The Origin Energy data breach affected approximately 900,000 current and former customers, and the company said it has substantially completed its review of what data was accessed for each individual.

Information accessed across those customers included some combination of name, address, date of birth, phone number, account details and the last four digits of a credit card or last three digits of a bank account. The hacker also accessed government concession scheme numbers linked to around 15,000 customers, Origin said.

"We have substantially completed our review into the information accessed for each affected customer, and our priority is completing our notifications to them and providing support," Origin Energy chief executive Frank Calabria said in a statement. He added that the company is working with the federal government, the Australian Cyber Security Centre and the Australian Federal Police.

The criminal investigation into the Origin Energy cyber attack remains ongoing. Authorities have traced the hack to a call centre in the Philippines, linking the breach to a former employee of Accenture, which runs call centre operations for Origin, ABC News reported. Accenture declined to comment.

Origin said the alleged hacker has not leaked or publicly disclosed any customer data, and has offered affected customers identity monitoring and 12 months of free credit monitoring. Cybersecurity expert Troy Hunt criticised the update, telling the ABC that Origin was "saying a lot without saying much."

In its annual report published last week, Origin confirmed executive bonuses would be cut as a result of the breach, with Calabria's pay reduced by $357,000 and other executive pay cut by a combined $607,000. The Origin Energy data breach 2026 was first reported by The Australian in July, after the alleged hacker sent the outlet a sample of 50 customer records.

The incident is believed to be the largest data breach at an Australian energy retailer, following past breaches at Qantas, Optus and Medibank, as well as a separate Mastercard outage in Australia. More information is available on the Origin Energy website. No timeline has been given for completing the investigation or remaining customer notifications.