Origin Energy has confirmed a data breach affecting around 900,000 current and former customers, admitting it was alerted to the hack three weeks before making it public. Chief executive Frank Calabria apologised and warned customers of a heightened scam risk.
Key facts
- About 900,000 current and former Origin Energy customers were affected by the hack.
- Origin admitted it was warned of the breach three weeks before informing the public.
- A significant proportion of those affected were former customers.
- CEO Frank Calabria apologised and advised customers to watch for suspicious activity.
- Affected customers are to be notified in the coming days.
Origin Energy, Australia’s largest energy retailer, has confirmed that a hack accessed the personal data of about 900,000 current and former customers, according to the Guardian. The company also admitted it was warned of the breach three weeks before it first made the incident public.
The company said a “significant” proportion of the 900,000 people affected had been former customers. Those affected are to be notified in the coming days, the Guardian reported.
Origin’s chief executive, Frank Calabria, apologised over the breach and advised customers to look out for suspicious activity amid a heightened scam risk following the incident.
The admission that Origin knew of the hack weeks before informing the public raises questions about the timing of its disclosure to affected customers. The Guardian reported that the warning came three weeks ahead of the public announcement.
Customers whose personal data may have been exposed have been urged to remain vigilant. Data breaches of this scale can increase the risk of scams and fraud targeting affected individuals, and Origin’s guidance to monitor for suspicious activity reflects that heightened risk.
Why it matters
With about 900,000 people affected, this breach touches a large share of Australian households and heightens the risk of scams targeting those customers. The revelation that Origin was warned weeks before telling the public raises broader questions about how and when companies disclose data breaches.
Frequently asked questions
How many people were affected by the Origin Energy hack?
About 900,000 current and former customers had their personal data accessed, according to the Guardian, with a significant proportion being former customers.
Did Origin Energy know about the hack before telling the public?
Yes. Origin admitted it was warned of the hack three weeks before it first made the data breach public.
What should affected customers do?
CEO Frank Calabria advised customers to look out for suspicious activity amid a heightened scam risk. Affected customers are to be notified in the coming days.

