Origin Energy confirmed unauthorised access to personal information of approximately 900,000 current and former customers in July 2026. Categories include name, address, date of birth, contact phone, account details, and partial payment data (last four digits of a credit card or last three of a bank account).

On 21 August 2026 Origin said a completed review found about 60 customers had full bank account numbers accessed, about 100 had an ID document number accessed (number only, no scans), and about 15,000 had government concession-scheme numbers accessed.

Origin told ABC the alleged attacker had not publicly leaked customer data. The company is working with ASD's ACSC, the National Office of Cyber Security, AFP and OAIC; a criminal investigation continues.

Earlier reporting linked the incident to a former Accenture Manila call-centre worker; Accenture declined to comment to ABC.

UPDATE (23 Oct 2026): AAP reports that at Origin's annual meeting on 14 October 2026 chairman Scott Perkins said: 'We have seen no evidence of the information being published on the internet or the dark web to date; however we note this risk remains and affected customers will need to remain vigilant to any suspicious activity or scams.' (source: AAP)