Origin Energy Waited Three Weeks to Disclose 900,000-Customer Data Breach

Origin Energy received an email on 2 July 2026 claiming customer data was accessed, but didn't disclose the breach until 22 July, confirming roughly 900,000 customers' personal data was exposed. CEO Frank Calabria said the company initially found no proof of exfiltration — data being copied out. Australia's Notifiable Data Breach scheme requires assessment "as soon as practicable."