Origin Energy customers face potential data leak as hacker issues ultimatum

An alleged hacker has claimed to have accessed the personal details of millions of Origin Energy customers, prompting an urgent investigation by the company.

In an email to 7NEWS, the individual, identifying as John Doe, said they had infiltrated Origin’s customer systems and obtained private data belonging to more than two million Australians.

“Most are loyal, long-term customers,” the message said.

The sender alleged they had previously contacted Origin’s board, security teams and customer service departments but received no response.

“They’ve shown no interest in resolving it before the data goes public,” the email claimed.

The individual said the data includes names, phone numbers, email addresses, dates of birth, account numbers and billing details, as well as property IDs and addresses.

They have demanded Origin make contact within 14 days to “settle the matter”, threatening to release the data publicly if no agreement is reached. The message included a link to a countdown clock.

Cyber security expert Professor Damien Manuel from Deakin University said the alleged demands appeared to be an attempt at extortion.

“To me, that suggests they’re looking for a payout,” he told 7NEWS.

He warned paying a ransom does not guarantee the data will remain private.

“Criminals being criminals, can you really trust they won’t release it anyway or try again?” he said.

Origin confirmed on Wednesday it was investigating a potential cybersecurity incident involving unauthorised access to some customer data, stressing it did not believe any customer credit card or bank account details had been compromised.

The hacker allegedly sent The Australian a sample of 50 customer records, containing names, addresses, emails, dates of birth, phone numbers and bill history.

Origin said it was working with forensic investigators to determine the extent of the incident. It is understood no ransom demand has been made.

“Origin is currently investigating a potential security incident which may involve unauthorised access to some customers’ data. We do not believe the impacted data includes customer credit card or bank details,” a spokeswoman told The Nightly.

“We understand an incident like this may raise concerns and acknowledge the impact of this uncertainty on Origin customers. Our investigations into this matter are occurring as a matter of urgency, and Origin will provide further updates as appropriate.”

The spokeswoman said Origin had notified the Australian Cyber Security Centre and the Australian Federal Police of the potential incident.

“We have also engaged the Office of the Australian Information Commissioner.”

The alleged hacker claimed they had contacted Origin’s board members, security teams and customer care departments following the breach before approaching the media.

They alleged they went public because “Origin failed to initiate contact and resolve this matter privately.”

Origin has 4.8 million customer accounts in Australia and provides electricity, natural gas, LPG, and internet services to residential and business customers.

Shares in the company had dropped nearly three per cent from the open at 1.30pm.

The investigation remains ongoing.

- with AAP