Origin Energy says personal data belonging to about 900,000 current and former customers was accessed, a significant share of them former customers, from a business with 4.8 million Australian accounts; the exposed fields may include names, addresses, birth dates, phone numbers, account information, and partial payment details. [1]

The company's timeline begins on July 2, when someone claimed by email to have customer records, but Origin says it found the threat not credible without proof; on July 22 it received proof of access and announced the breach, separating an allegation from evidence and disclosure. [1]

Chief executive Frank Calabria said Origin had secured its system and did not believe information had appeared on the dark web, but he declined to say when the intrusion occurred, whether an employee was involved, whether a ransom was sought or paid, or whether the leak risk remained active. [1]

The Guardian's three-weeks-of-silence frame captures a real accountability interval without establishing three weeks of known compromise, while corporate reassurance cannot prove that no copies, scams, fraud, or future misuse exist; system, field, detection, containment, regulator notice, customer loss, and remedy records are still missing, and Origin has not published a customer-level account of notifications or support. [1]

-- PRIYA SHARMA, Delhi