Australia's Origin Energy flags possible data exposure of about 900,000 customers (updated)

Origin Energy

28/07/2026 02:34

Adds details, share prices and background from paragraph 2 onwards
July 28 (Reuters) - Australia's Origin Energy ORG.AX said on Tuesday that data linked to about 900,000 current and former customers may have been accessed in a cybersecurity incident, and that it was contacting those affected.
The country's top electricity and gas retailer said last week that it was investigating a potential security breach involving unauthorised access to some customer information.
On July 23, Origin said the affected data could include financial details, such as the last few digits of a customer's credit card or bank account numbers.
Shares of the firm were down 1.7% at A$10.47, as of 0121 GMT on Tuesday, while the broader ASX200 benchmark index .AXJO traded 0.3% lower. 
The company said on its website that it had completed the initial phase of its review and was notifying affected customers, while also offering identity protection and cybersecurity support services.
The Sydney-headquartered company had been reviewing a potential security threat since early July, but said that based on information available at the time, it was not considered credible. 
It said new information received on July 22 indicated a potential security incident may have occurred, prompting it to notify customers and investors.
Origin said it had engaged cybersecurity and forensic specialists, taken steps to secure its systems, and was continuing its investigation into the incident, while urging customers to remain vigilant for potential scams and suspicious activity.


 (Reporting by Rajasik Mukherjee; Editing by Mrigank Dhaniwala and Sherry Jacob-Phillips)
 ((Rajasik.Mukherjee@thomsonreuters.com;))