Origin Energy data breach hits 900,000 customers: What you need to know

Origin Energy says hackers accessed the personal information of around 900,000 current and former customers in one of the biggest data breaches to hit an Australian energy retailer.

The Sydney-based company, which supplies electricity and gas to nearly 5 million households and businesses, revealed the figure today (28 July) after completing the initial phase of its investigation.

What data was exposed in the Origin Energy hack?

The information accessed in the breach may include your name, home address, date of birth, phone number and account details.

For some customers, partial financial information was also exposed, such as the last four digits of a credit card or the last three digits of a bank account number.

Origin says this can't be used on its own to make fraudulent transactions or access your account.

As the incident is now being treated as a criminal matter and is under investigation, the retailer can't share too many details just yet.

What is Origin Energy doing for affected customers?

Origin is contacting affected customers directly to let them know if their information was caught up in the data breach.

The company has also extended its customer support hours, set up a dedicated phone line for the incident and made specialist identity and cyber support services available to customers who need them.

If you have questions or concerns, you can contact Origin on (08) 9922 7000 or email hello@origin.com.au.

If you're an Origin customer and haven't heard anything yet, there's no need to assume your details were exposed.

Origin says it will contact you directly if your data was involved, so be cautious of anyone reaching out claiming otherwise.

What do I do if I'm affected by the Origin Energy data breach?

Whether or not your details were caught up in the breach, it's worth taking a few minutes to tighten up your online security.

Here's what to do:

• Be extra cautious of unexpected emails, texts and phone calls. Scammers often jump on data breaches, sending messages that look like they're from the affected company.
• Don't click links or share personal information unless you're sure the communications are genuine. If something feels off, trust your instincts.
• Double-check any message claiming to be from Origin. If you're asked to log in, confirm your details or make a payment, don't use the link in the message. Instead, head to Origin's website or app yourself, or call the number on a previous bill.
• Keep an eye on your bank and card statements. If you spot a transaction you don't recognise, contact your bank straight away.
• Turn on two-step authentication where you can. Origin recommends enabling it on your email and other online accounts, ideally using an authenticator app.
• Change your passwords, especially if you've reused them. If your Origin password is the same as one you use elsewhere, update those accounts too.
• If you're feeling uneasy, you could put a credit ban in place. It's free through Australia's credit reporting agencies and can stop someone from opening new credit in your name.

What exactly happened?

Origin says it had been reviewing a potential security threat since early July but, based on the information available at the time, didn't initially assess it as credible.

That changed on 22 July 2026, when new information indicated a security incident may have occurred and it acted immediately, updating the market and notifying customers as a precaution.

Behind the scenes, Origin says it's working with cyber security and forensic experts to contain the breach and strengthen its systems.

It's also working with Australian Government agencies, including the Australian Cyber Security Centre, the National Office of Cyber Security and the Australian Federal Police and has notified the office of the Australian Information Commissioner.