Origin Energy investigates alleged cyber breach after hacker claims access to data of two million customers

An alleged hacker has claimed to have accessed the personal details of around two million Origin Energy customers, prompting an urgent investigation by the energy giant following reports of a potential data breach.

Origin confirmed on Wednesday it was investigating a potential cybersecurity incident involving unauthorised access to some customer data, stressing it did not believe any customer credit card or bank account details had been compromised.

The hacker allegedly sent The Australian a sample of 50 customer records, containing names, addresses, emails, dates of birth, phone numbers and bill history.

Origin said it was working with forensic investigators to determine the extent of the incident. It is understood no ransom demand has been made.

“Origin is currently investigating a potential security incident which may involve unauthorised access to some customers’ data. We do not believe the impacted data includes customer credit card or bank details,” a spokeswoman told The Nightly.

“We understand an incident like this may raise concerns and acknowledge the impact of this uncertainty on Origin customers. Our investigations into this matter are occurring as a matter of urgency, and Origin will provide further updates as appropriate.”

The spokeswoman said Origin had notified the Australian Cyber Security Centre and the Australian Federal Police of the potential incident.

“We have also engaged the Office of the Australian Information Commissioner.”

The alleged hacker claimed they had contacted Origin’s board members, security teams and customer care departments following the breach before approaching the media.

They alleged they went public because “Origin failed to initiate contact and resolve this matter privately.”

The investigation remains ongoing.

More to come...