Origin Energy investigates potential data breach affecting millions

Origin Energy, the nation’s largest energy retailer, has confirmed it is investigating a potential cybersecurity incident that may have exposed the personal information of a significant portion of its client base. The energy provider, which manages millions of residential and business accounts across Australia, acknowledged the security situation on Wednesday, 22 July 2026, amid claims from an alleged hacker that millions of records have been compromised.

The Brisbanetimes reports that the company is currently scrutinizing its systems after reports surfaced that sensitive data, including names, home addresses, contact numbers, and dates of birth, may be in the possession of an unauthorised party. Thenightly notes that the individual claiming responsibility for the breach allegedly shared a sample of 50 customer records with media to substantiate their access. These records reportedly included email addresses and bill history, in addition to the personal identifiers already identified.

Media additions

Despite the severity of the alleged theft, Origin Energy has moved to reassure its customer base regarding the most sensitive financial information. In official statements released on Wednesday, 22 July 2026, the firm emphasized that it does not currently believe any credit card or bank account details were accessed during the incident.

Official Response and Regulatory Oversight

The company has initiated an urgent review of its data systems. According to Canberratimes, Origin has formally notified several key national bodies, including the Australian Federal Police and the Australian Cyber Security Centre. Furthermore, the company has engaged with the Office of the Australian Information Commissioner to ensure regulatory compliance and transparency as the investigation unfolds.

"Our investigations into this incident are occurring as a matter of urgency, and Origin will provide further updates as appropriate."

While the company works to determine the full scope of the breach, the alleged hacker has claimed they attempted to initiate contact with internal departments, including board members and security teams, before taking the information public. The source of the claim suggested that the disclosure occurred because the energy provider failed to resolve the matter privately.

Market Impact and Customer Scope

The news has triggered an immediate reaction in the financial markets. Investors responded to the potential security lapse by selling shares, with reports indicating a decline in the company’s share price of between 2 per cent and 3 per cent on Wednesday, 22 July 2026.

The scale of the potential exposure is considerable, given that the retailer provides a range of services—including electricity, natural gas, LPG, and internet—to millions of accounts. To assist customers in understanding the current landscape of the investigation, the following details have been confirmed as of the latest update:

• Investigation Status: Urgent forensic review underway.
• Regulatory Involvement: Australian Federal Police, Australian Cyber Security Centre, and the Office of the Australian Information Commissioner.
• Stated Security Status: No evidence suggesting compromise of bank or credit card details.
• Disputed Claims: An anonymous actor alleges access to 2 million records; these claims remain unverified by the company.

For now, Origin Energy maintains that it is prioritizing the resolution of the incident and will continue to communicate findings as they become available. The company has stated that it recognizes the impact of this uncertainty on its customers and is working to mitigate the risks associated with the unauthorized data access.