Origin Energy Data Breach: Fired Employee's Credentials Expose Up to 2 Million Australian Customers

Origin Energy disclosed on July 23, 2026 that unauthorized access to its third-party Kraken CRM exposed personal data and partial financial fragments for up to 2 million customers after credentials of a terminated employee were not revoked; the actor (alias Edison Walthour) exfiltrated data and demanded extortion, no ransomware or operational impact was reported, and Origin has notified regulators, engaged forensic specialists, and begun customer outreach.