Origin Energy Warned of Hack on 2 July, Waited Three Weeks to Disclose 900,000-Customer Breach

Origin Energy received an email on 2 July 2026 from someone claiming to have accessed customer data but did not disclose the breach publicly until 22 July, when it confirmed the personal data of approximately 900,000 current and former customers was accessed. CEO Frank Calabria said the company initially found no proof of exfiltration. Australia's Notifiable Data Breach scheme requires assessment "as soon as practicable."