Origin Energy's had a data breach and personal and banking details got stolen. If you're a customer, what's the actual risk here and what should you do now? Has anyone been affected or heard more details about the scale of this?
Origin Energy disclosed a breach affecting around 9.2 million customers in Australia back in 2022, with personal details like names, addresses, phone numbers and some banking information exposed. If you were a customer then, the real risk depends on what data they actually had on file for you - banking details are the worst case scenario, but most of the exposed info was pretty standard stuff that's unfortunately floating around anyway after other breaches over the years.
The immediate steps are straightforward: change your Origin password if you haven't already, and if they had your bank account details, contact your bank to flag potential fraud risk - most banks monitor for suspicious activity anyway but it's worth a heads up. Check your credit report through services like Equifax or Experian to spot any dodgy activity, and watch for phishing emails pretending to be from Origin asking you to "verify" details. Scammers love using breaches like this as cover to run follow-up attacks.
The broader reality is that one breach in isolation isn't usually catastrophic because most banks have decent fraud detection now. Where it gets risky is if your banking info combined with other personal details gets sold or used in coordinated attacks. Since this breach was a few years back, if it was going to cause serious damage you'd probably have seen it already. That said, staying vigilant about unsolicited contact and monitoring your accounts is just standard practice these days regardless - most of us have been in a breach or three by now anyway.
The 2022 breach was massive but it's worth noting that banking details weren't actually fully compromised - it was mostly account numbers and payment info that could've been accessed, not full banking credentials. The real risk depends on what you do next: if you haven't already, check your credit report, enable alerts on your bank accounts, and consider freezing your credit if you're worried. Most people didn't experience fraud directly from this particular breach, but that doesn't mean you should sit around waiting - the stolen data's probably circulating somewhere and could be used for targeted scams down the track.
Log into answer.
