Customer bank account numbers accessed in Origin Energy data breach
Dozens of full bank account numbers were compromised in a major cybersecurity breach impacting Origin Energy.
The details of about 900,000 past and present customers were accessed in a mass data leak on July 2 and Origin initially warned it may include customers’ names, addresses, dates of birth, phone numbers and partial account details.
Origin Energy chief executive Frank Calabria confirmed that approximately 60 full bank account numbers were accessed in the breach. Louise Kennerley
Following an internal review, the energy provider has now confirmed the full bank account numbers of an estimated 60 customers were accessed during the incident.
Another 100 customer ID document numbers – which includes driver’s licence and passport numbers – were also accessed.
A further 15,000 government concession scheme or program numbers were compromised in the breach.
For most of the 900,000 impacted customers, personal information accessed included a combination of name, address, date of birth, contact phone number, account, the last four digits of a credit card or the last three digits of a bank account.
“Origin has contacted the approximately 900,000 current and former customers whose information was subject to unauthorised access and provided them with support,” Origin said in an update published on Friday.
“Where possible, we will be directly notifying those other contacts to let them know their information was accessed and to provide support.”
The energy giant said it has taken steps to enhance its security to prevent future incidents.
A criminal investigation into the hack is also under way.
About 900,000 past and present customers were impacted by the breach. iStock Editorial
“While the criminal investigation into this incident remains ongoing, Origin is confident in the steps we have taken to respond,” Origin chief executive Frank Calabria said.
“We have substantially completed our review into the information accessed for each affected customer, and our priority is completing our notifications to them and providing support.
“Customers should remain vigilant to any suspicious activity and to contact us directly with any questions.”
Share a tip-off, video or photo with us
