900,000 customers’ data accessed in Origin Energy hack

Origin Energy logo on side of corporate headquarters (profit)
Image: Shutterstock

Australia’s largest gentailer, Origin Energy, believes the personal information of approximately 900,000 current and former customers was accessed in a data security breach last week.

Origin CEO Frank Calabria said, “We have now completed the initial phase of our review into Origin’s customer data security incident.

Related article: Origin confirms security breach includes customer data

“At this point in time, we believe the information of approximately 900,000 current and former customers was accessed.

“To our customers, I am sorry. We don’t take for granted the trust customers place in Origin and our safeguarding of their information.

“Supporting affected customers is our key priority. We are contacting those customers whose information has been accessed and are providing support to them.”

Origin has now revealed that it had been reviewing a potential security threat since early July. Based on the information available, it was not assessed to be credible.

On 22 July, new information emerged that indicated a potential security incident may have occurred.

“We acted immediately, providing updates to the market and notifying our customers as a precaution,” Calabria said.

Origin said it was working with cyber security and forensic specialists to ensure the incident was contained, and has taken steps to secure its systems.

“We continue to work very closely with the Australian Government and other agencies, including the Australian Cyber Security Centre, the National Office of Cyber Security and the Australian Federal Police. We have also notified the Office of the Australian Information Commissioner,” Calabria said.

Related article: What happens when hackers come for the grid?

“Our review into this incident is continuing.”

Stay on top of the latest energy news and insights by subscribing to our free weekly e-newsletter and digital magazine.

Previous articleEnergy retailer CovaU fined for alleged rule breach