Accenture and Origin Energy: Origin hack investigation points to offshore Accenture employee

Origin Energy Data Breach Traced to Former Accenture Employee in Manila

A security breach at Origin Energy, exposing the personal data of nearly one million customers, is now under investigation, with authorities focusing on a former Accenture employee based in Manila. The individual, who had worked on outsourced billing and customer support functions for the Australian energy provider, allegedly attempted to extort the company by demanding payment in exchange for the stolen information.

The breach highlights vulnerabilities in third-party outsourcing, as Origin Energy had contracted Accenture for critical operations. The former employee has since left the consulting firm. The incident follows a separate 2019 legal case in which Marriott customers sued Accenture over a data breach, though the company itself was not the plaintiff.

Details remain under investigation, but the case underscores the risks of offshore data handling and the potential for insider threats in large-scale outsourcing arrangements. The breach’s full impact on affected customers is still being assessed.

Source: https://www.afr.com/technology/origin-hack-investigation-points-to-offshore-accenture-employee-20260817-p60oxo

Accenture TPRM report: https://www.rankiteo.com/company/accenture-in-the-philippines

Origin Energy TPRM report: https://www.rankiteo.com/company/origin-energy

"id": "oriacc1787004166",
"linkid": "origin-energy, accenture-in-the-philippines",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Nearly one million',
                        'industry': 'Energy',
                        'location': 'Australia',
                        'name': 'Origin Energy',
                        'type': 'Company'}],
 'attack_vector': 'Insider Threat',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': 'Nearly one million',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (personally identifiable '
                                        'information)',
                 'type_of_data_compromised': 'Personal data'},
 'description': 'A security breach at Origin Energy exposed the personal data '
                'of nearly one million customers. The breach is under '
                'investigation, with authorities focusing on a former '
                'Accenture employee based in Manila who allegedly attempted to '
                'extort the company by demanding payment in exchange for the '
                'stolen information. The incident highlights vulnerabilities '
                'in third-party outsourcing.',
 'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
                                       'third-party outsourcing risks',
            'data_compromised': 'Personal data of nearly one million customers',
            'identity_theft_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Former employee with access to '
                                          'billing and customer support '
                                          'systems'},
 'investigation_status': 'Ongoing',
 'lessons_learned': 'Risks of offshore data handling and insider threats in '
                    'large-scale outsourcing arrangements',
 'motivation': 'Extortion',
 'post_incident_analysis': {'root_causes': 'Third-party outsourcing '
                                           'vulnerabilities, insider threat'},
 'ransomware': {'data_exfiltration': 'Yes',
                'ransom_demanded': 'Yes (extortion demand)'},
 'references': [{'source': 'News Article'}],
 'threat_actor': 'Former Accenture employee',
 'title': 'Origin Energy Data Breach Traced to Former Accenture Employee in '
          'Manila',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Third-party outsourcing vulnerabilities'}