Personal and banking details among customer data stolen in Origin Energy hack

Origin Energy, a major Australian energy provider, has confirmed that personal and some banking information belonging to its customers has been accessed by hackers. The company supplies electricity, gas, and internet services to millions of households and businesses across Australia.

The full extent of the breach is still being determined, and Origin Energy has stated it will inform customers directly if their data has been compromised. This incident follows an earlier announcement by the company on Thursday, where it first disclosed the security breach. It remains unclear how many of Origin's 4.8 million customer accounts have been affected by this cyberattack.

While Origin Energy initially suggested that credit card or bank account details had not been accessed, a person claiming responsibility for the hack has allegedly contacted media outlets with unverified claims of accessing details from up to 2 million customers. The company has not yet explained the specific method used to carry out the breach.

The compromised data may include names, addresses, dates of birth, phone numbers, and Origin account information. Additionally, the last four digits of some customers' credit card numbers or the last three digits of bank account numbers might have been accessed. Origin Energy has assured the public that incomplete card or bank details are unlikely to be used for fraudulent purchases or account access.

Origin Energy's chief executive, Frank Calabria, expressed his apologies for the incident and assured customers that the company is working diligently to secure its systems and prevent further unauthorized access. They are collaborating with external cybersecurity experts and relevant authorities to investigate the breach thoroughly.

Cybersecurity experts have expressed concerns that the stolen personal information could be misused for identity theft or to conduct sophisticated phishing scams, where criminals impersonate legitimate companies. Dr. Rumpa Dasgupta from La Trobe University highlighted that such detailed personal records could potentially be exploited for physical crimes, such as identifying vulnerable homes for burglary.

The Australian Cyber Security Centre, the Australian federal police, and the Office of the Australian Information Commissioner (OIAC) are all involved in the investigation. The National Office of Cyber Security is coordinating the government's response. This incident is part of a broader trend, with the OIAC reporting a significant increase in data breach notifications, many of which are linked to criminal activity.