Origin Energy Says Data Breach Affects 900,000 Customers
Summary
Origin Energy said an intrusion affected data belonging to 900,000 current and former customers. An individual claiming responsibility alleged data from 2 million customers was obtained and threatened a leak; Origin has not confirmed an alleged settlement.
Key points
- Origin said the breach affects 900,000 current and former customers.
- The company said threat actors accessed names, dates of birth, phone numbers, addresses, account information, and partial payment-card or bank-account numbers.
- Origin said new information on July 22 confirmed the intrusion, after an earlier assessment found the potential threat not credible.
- An individual claiming responsibility said data from 2 million customers had been obtained and threatened to leak it unless Origin paid a ransom.
- The individual later told The Australian that an agreement had been reached and no data would be released; Origin has not confirmed an agreement.
- Origin warned that other threat actors could use the incident to facilitate scams.
Article Details
- Victim Organization
- Origin Energy Limited
- Incident Type
- Confirmed unauthorized access to customer data
- Data Types Exposed
- Names
- Dates of birth
- Phone numbers
- Addresses
- Account information
- Partial payment card numbers
- Partial bank account numbers
- Affected Records
- 900,000 current and former customers, according to Origin Energy
- Operational Impact
- No operational disruption or service impact is described.
- Ransom Or Extortion
- An individual claiming responsibility said they would leak data unless Origin paid a ransom, then later claimed an agreement had been reached and no data would be released. Origin did not confirm an agreement.
- Claim Status
- confirmed