Origin Energy customers’ data may have been accessed in a potential security breach, the energy provider says.
In a statement made to the ASX early Wednesday afternoon, the energy giant – which has about nearly five million customers – said they were “urgently” investigating the possible cyber breach.
The Australian newspaper was sent 50 customer records containing basic details including name, email, address, date of birth, phone number and bill history.
Origin Energy said the could not confirm if the details were stolen.
“Origin is currently investigating a potential security incident which may involve unauthorised access to some customers’ data,” the spokeswoman said.
“We do not believe the impacted data includes customer credit card or bank details.”
Origin has notified the Australian Cyber Security Centre and Australian Federal Police and is investigating the incident as a “matter of urgency”.
“We understand an incident like this may raise concerns and acknowledge the impact of this uncertainty on Origin customers,” the company said.
“Our investigations into this matter are occurring as a matter of urgency, and Origin will provide further updates as appropriate.”
Origin Energy services around 4.8 million Australians across the country across its electricity, gas and internet plans.
The Australian reported up to two million customers have had their data breached.
Steve Hunter, director of engineering at cybersecurity firm Arctic Wolf, warned that any data seized would give “personal context” to create convincing phishing messages.
“Even where credit card or banking information has not been compromised, the reported combination of contact details, dates of birth and billing history can be extremely valuable to cybercriminals,” he said.
“It gives attackers the personal context needed to create convincing messages that appear to come from a trusted service provider.
“Customers should be particularly cautious of unsolicited calls, emails or text messages referring to an overdue bill, refund, account verification or urgent password reset.”