Origin Energy's 900,000 Customer Breach: Trust, Interrupted

Origin Energy, one of Australia's largest electricity and gas retailers, confirmed what nobody wanted to hear: approximately 900,000 current and former customers had their bank account details accessed in a security breach. For context, that's nearly one in five of their 4.8 million customer base. The company first noticed something suspicious in early July but didn't think it was credible. They were wrong. By 22 July 2026, the threat was confirmed real.

The hacker apparently had patience and a media strategy—they contacted The Australian newspaper claiming to have accessed records of two million customers, which forced Origin's hand on disclosure. What actually got stolen reads like a identity theft starter pack: names, addresses, dates of birth, phone numbers, account details, and partial payment information. The thieves got the last four digits of credit cards or the BSB and last three digits of bank accounts. So not full card numbers, but enough to make identity theft specialists wince.

CEO Frank Calabria managed the obligatory apology: "To our customers, I am sorry. We don't take for granted the trust customers place in Origin and our safeguarding of their information." The company is now offering identity and cyber support services to affected customers, which is correct protocol but also somewhat like offering a band-aid for a structural problem.

The real story isn't the hack itself—those happen. It's that a major infrastructure provider with 4.8 million customers thought a credible security threat wasn't credible for nearly three weeks. That gap between detection and action is where reputations go to die. Australian authorities including the Australian Cyber Security Centre, the National Office of Cyber Security, the Australian Federal Police, and the Office of the Australian Information Commissioner are now investigating.

Origin Energy will survive this. Customers need their power on. But the trust thing Calabria mentioned? That doesn't flow back quite so easily.