Origin Energy Reports Hack of Customer Data Including Names and Addresses

Scope of the Breach

Origin Energy has confirmed that customer data, including names, addresses, dates of birth, phone numbers, and partial bank account details, have been compromised in a recent hack. The company serves 4.8 million customers across Australia, providing a range of services such as electricity, fossil gas, LPG, and internet to both homes and businesses.

Origin has yet to determine the extent of the breach or how many specific accounts were affected. In an ASX statement on Thursday, the company assured it would inform its customers once this information was confirmed. A claimant, who said they were behind the hack, contacted media outlets with unverified claims that 2 million customer details were accessed. While Origin did not confirm these figures, the company stated that any incomplete credit card or bank account information could not be used to make purchases or access accounts.

Response and Expert Warnings

Origin's CEO, Frank Calabria, apologized for the incident and emphasized the importance of customer data security. The company is collaborating with independent cyber experts and law enforcement agencies, including the Australian Cyber Security Centre (ACSC), the Australian Federal Police (AFP), and the Office of the Australian Information Commissioner (OAIC).

Rumpa Dasgupta, a cybersecurity expert at La Trobe University, highlighted the potential misuse of this data. She warned that personalized records could be exploited for highly targeted phishing campaigns or physical crimes such as burglary.

Background and Implications

This incident comes amidst rising concerns about data breaches in Australia. The Office of the Australian Information Commissioner reported receiving 1,205 data breach notifications last year, with 716 related to malicious or criminal activity. In October, Qantas also experienced a data leak affecting 5 million customers.

The federal privacy commissioner concluded that Qantas did not violate the Privacy Act in relation to this hack. Nevertheless, the Australian Federal Police are investigating both incidents for potential misuse of customer information.

Conclusion

The breach at Origin Energy underscores the ongoing threat of data breaches and the need for enhanced cybersecurity measures. As investigations continue, customers are advised to remain vigilant against identity theft and potential scams. The Australian Cyber Security Centre is leading the government's response to this incident.

Source: The Guardian