Sydney-based **Origin Energy** initially announced an investigation into a “potential security incident” after *The Australian* newspaper reported a purported hacker claiming to possess and share samples of stolen company records. In a subsequent update, **Origin Energy** confirmed that customer data had indeed been compromised. While the total number of impacted customers is still being determined, the stolen information may include sensitive details such as account information, the last four digits of credit card numbers, the last three digits of bank account numbers, names, addresses, and dates of birth. **Origin Energy** CEO **Frank Calabria** issued an apology to customers, stating, “One of our key priorities is taking action to secure our systems and ensure no further unauthorised access. We are working with independent cyber experts to support **Origin**, and that work is continuing alongside the work of authorities.” This incident marks another significant cyberattack within Australia's critical infrastructure and healthcare sectors. It follows the recent compromise of sensitive medical data belonging to **Partnered Health**, a major Australian network of healthcare clinics. **Partnered Health** confirmed that patients who visited at least 21 clinics may have had their medical records stolen in a separate cyberattack, highlighting a growing trend of cyber threats targeting essential services in the country.