Australian Energy Supplier Origin Confirms Security Breach

Origin Energy disclosed on 23 July 2026 that threat actors accessed and exfiltrated portions of its customer information systems, exposing PII (names, addresses, DOBs, phone numbers, account information) and limited financial fragments (last four card digits and final three bank account digits). The company is investigating with independent cybersecurity experts and Australian authorities (ACSC, AFP, OAIC), has begun containment and remediation, and is notifying affected customers; attribution and initial attack vector have not been released.