TL;DR: Origin Energy disclosed a breach on 28 July 2026 affecting about 900,000 current and former customers, roughly one in five. Exposed: names, dates of birth, phone numbers, addresses, account information and partial card or bank account numbers. The attacker claims 2 million; Origin hasn’t confirmed that. No credit monitoring has been announced. Expect very convincing "Origin" bills, refunds and "account problem" calls, and treat them all with suspicion.
What happened
According to Daily Security Review, Origin began investigating in early July 2026 after receiving a threat report it first didn’t think was credible. New evidence on 22 July escalated things, and Origin disclosed on 28 July.
- Affected: about 900,000 of roughly 4.8 million customers
- Attacker’s claim: 2 million customers, not confirmed by Origin
- How: not disclosed; CEO Frank Calabrese cited an ongoing investigation by authorities
Reuters’ list of major Australian breaches includes Origin as the latest big name before the OpenAI agent incident.
What was exposed
| Data | Exposed |
|---|---|
| Names | Yes |
| Dates of birth | Yes |
| Phone numbers and addresses | Yes |
| Account information | Yes |
| Card or bank account numbers | Partial |
"Partial" is better than full. But a birthday, address and a few digits of your bank account are exactly what a scammer needs to sound like your bank on the phone.
The real risk: targeted scams
Origin itself warned that even if the original attacker never publishes the data, other criminals could get hold of it for scams and phishing. Banks noticed too: NAB put the Origin incident on its scam alerts page, warning of targeted phishing.
Expect:
- fake Origin bills or "overdue" notices with a payment link;
- "refund" or "compensation for the breach" emails;
- calls from "your bank’s fraud team" quoting your partial account number.
What to do
- Be sceptical of any contact claiming to be Origin, another utility or your bank. Call back on a number you look up yourself.
- Pay bills only through the Origin app or a site you type in.
- Watch your bank statements for unfamiliar direct debits.
- Consider a credit ban if you’re worried about your birthday and address being misused (how).
- Turn on multi-factor authentication on email and banking.
- Contact IDCARE on 1800 595 160 for free support if you think your identity is being misused.
Check which other breaches your email is in with a free exposure check. See all the big ones in our Australian breach list.
Frequently Asked Questions
How many people were affected by the Origin Energy breach?
About 900,000 current and former customers, according to Origin. The attacker claims 2 million, which Origin hasn’t confirmed.
Was my bank account number exposed?
Partial card or bank account numbers were exposed for affected customers.
Is Origin offering credit monitoring?
Origin had not announced credit monitoring or identity protection services at the time of reporting.
When did Origin disclose the breach?
28 July 2026.
Sources
- Daily Security Review: Origin Energy breach exposes data on 900,000 customers
- Reuters factbox via The Star: Major Australian data breaches
- NAB: Latest scam alerts