Origin Energy confirms data breach; attacker claims 2M records

Origin Energy confirmed unauthorized access to some customers’ data after it detected a potential cybersecurity incident on July 22 and opened an investigation. The company provided an update on July 23 and said it is still working to determine how many customers were affected.

Origin stated the attacker may have obtained names, addresses, dates of birth, phone numbers, account information and partial payment card or bank account numbers. Customers believed to be impacted are being contacted directly by the company.

The firm engaged external cybersecurity experts to assist with the inquiry and notified Australian law enforcement along with relevant cybersecurity and privacy agencies. Origin said there is no indication the incident has affected its power generation, supply or other critical operations.

An individual claiming responsibility has asserted that records for about 2 million customers were taken and threatened to release the data unless a ransom is paid. Origin has not verified that total and continues to investigate the claim.

Origin serves roughly 4.8 million customers nationwide. The company is working to secure systems, support affected customers and determine how the intrusion occurred while cooperating with authorities as the investigation continues.