On July 22, 2026, Origin Energy Limited confirmed a cybersecurity incident involving unauthorized access to customer information. The breach potentially exposed personal and partial financial data of some customers, with a hacker claiming to have stolen records of 2 million individuals and threatening to leak the data unless a ransom is paid. Origin Energy is conducting an ongoing investigation, engaging external cybersecurity experts, and coordinating with Australian law enforcement and privacy agencies. The incident does not appear to have impacted the company's production or critical infrastructure operations. The exact number of affected customers is still being determined.

The breach exposed sensitive personal information including names, addresses, dates of birth, phone numbers, account information, and partial payment card or bank account numbers of potentially millions of customers. This exposure increases the risk of identity theft, fraud, and targeted phishing attacks against affected individuals. The threat actor's ransom demand and potential data leak pose additional reputational and operational risks to Origin Energy. There is no reported impact on the company's operational technology or critical energy infrastructure.

Origin Energy has engaged external cybersecurity experts and notified relevant Australian law enforcement and privacy authorities. Impacted customers are being contacted by the company. No official patch or remediation is applicable as this is a data breach incident rather than a software vulnerability. Organizations should monitor communications from Origin Energy for updates and follow any guidance provided. Customers should remain vigilant for phishing attempts or fraud attempts leveraging stolen data.