Origin Energy

Origin Energy, a prominent Australian energy and internet provider, experienced a data breach involving a former employee who allegedly collected and stole sensitive personal information of approximately 700 individuals. The incident highlights an insider threat where unauthorized access was exploited to compromise confidential data, potentially exposing affected individuals to risks such as identity theft, financial fraud, or reputational harm. The breach underscores vulnerabilities in internal access controls and post-employment data security protocols, raising concerns about the protection of customer and employee information within the organization. While the exact nature of the stolen data (e.g., financial records, personal identifiers) was not detailed, the incident reflects a significant lapse in safeguarding private information against malicious insider actions.

Source: https://www.teiss.co.uk/news/origin-energy-reports-data-breach-linked-to-former-employee-16600

TPRM report: https://www.rankiteo.com/company/origin-energy

"id": "ori4332643102425",
"linkid": "origin-energy",
"type": "Breach",
"date": "10/2025",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': '700 individuals',
                        'industry': 'Energy and Internet Services',
                        'location': 'Australia',
                        'name': 'Origin Energy',
                        'type': 'Company'}],
 'attack_vector': 'Insider Threat (Former Employee)',
 'data_breach': {'data_exfiltration': 'Yes (allegedly stolen by former '
                                      'employee)',
                 'number_of_records_exposed': '700',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Sensitive Personal Information'},
 'description': 'Origin Energy, an Australian energy and internet provider, '
                'reported a data security incident in which a former employee '
                'allegedly collected and stole sensitive personal information '
                'belonging to around 700 individuals.',
 'impact': {'brand_reputation_impact': 'Potential (due to breach disclosure)',
            'data_compromised': 'Sensitive Personal Information',
            'identity_theft_risk': 'High (sensitive personal information '
                                   'exposed)'},
 'investigation_status': 'Ongoing (allegations reported)',
 'post_incident_analysis': {'root_causes': 'Insider Threat (Misuse of Access '
                                           'by Former Employee)'},
 'response': {'communication_strategy': 'Public Disclosure'},
 'threat_actor': 'Former Employee',
 'title': 'Origin Energy Data Breach Linked to Former Employee',
 'type': 'Data Breach (Insider Threat)'}