Key Takeaways

  • Origin told the ASX on 23 July 2026 that some customer data had been accessed and disclosed without authorisation; it has not said how many customers are affected and has not attributed a cause.
  • Exposed fields may include name, address, date of birth, phone number, account information and partial credit card or bank account digits.
  • All four Eraring units will now run to 30 April 2029, extended from 19 August 2027.
  • Half-year underlying profit fell to $593 million from $924 million; Energy Markets rose, Integrated Gas fell.

Origin has confirmed unauthorised access to customer data but has not said how many accounts were touched or what caused it. The disclosure lands while the company runs Eraring down to 2029, builds a 700MW battery beside it and carries a 22.7% stake in Octopus Energy.

Origin told the ASX on 23 July 2026 that some customer data had been accessed and disclosed without authorisation; it has not said how many customers are affected and has not attributed a cause.

Exposed fields may include name, address, date of birth, phone number, account information and partial credit card or bank account digits.

All four Eraring units will now run to 30 April 2029, extended from 19 August 2027.

Half-year underlying profit fell to $593 million from $924 million; Energy Markets rose, Integrated Gas fell.

An energy retailer's product arrives invisibly through a wire, so its relationship with customers rests almost entirely on billing accuracy and trust. Origin Energy spent last week testing the second. On 22 July 2026 it told the market it was investigating a potential security incident; a day later it came back with something firmer, confirming customer data had been accessed and disclosed without authorisation.

The sequence is as awkward as the substance. The first release said credit card and bank details were not believed to be involved; the second acknowledged partial payment identifiers may be among the exposed fields. That is a narrow change technically and a wide one in perception, and it landed alongside customer complaints about notification emails arriving in the small hours. It also lands against a busy backdrop: Eraring's retirement pushed out to 2029, a battery build beside it, and an Octopus Energy stake that has swung from contributor to drag.

What Has Happened?

The 22 July announcement was preliminary: an investigation into a potential incident that may involve unauthorised access to some customers' data, with the Australian Cyber Security Centre, Australian Federal Police and OAIC notified.

The 23 July update went further. Origin confirmed unauthorised access to and disclosure of some customers' data, said it was still determining the total number involved, and undertook to contact those impacted. Information that may have been accessed includes name, address, date of birth, contact phone number and account information, plus the last four digits of a credit card or the last three of a bank account — partial identifiers Origin stressed cannot on their own be used to make purchases or access accounts. Chief executive Frank Calabria apologised, and the company said it had engaged independent cyber experts.

Several things have deliberately not been said. Origin has published no customer count, attributed no cause and named no attack vector, and as at 24 July no threat actor had publicly claimed responsibility, according to trade publication Cyber Daily. Under the Notifiable Data Breaches scheme, which obliges entities to notify where serious harm is likely, that scope assessment is what remains outstanding.

Separately, on 20 January 2026 Origin told the Australian Energy Market Operator it would extend all four Eraring units from 19 August 2027 to 30 April 2029, calling the decision consistent with the existing May 2024 agreement with the NSW Government. It has not set out that arrangement's financial mechanics, and will not fund further major overhauls before retirement.

Understanding the Company

Origin runs three businesses. Energy Markets is the retail and generation arm: 4,791,000 electricity, gas, internet and LPG accounts at 31 December 2025, supplied partly from the 2,880MW Eraring coal station and increasingly from batteries. Integrated Gas is a 27.5% interest in Australia Pacific LNG, the Queensland coal seam gas to LNG venture. The third leg is a 22.7% economic interest in UK retailer Octopus Energy and in Kraken, the utility software platform Octopus spun out.

Eraring's extension is a bridge, not a reversal. Origin is simultaneously building the Eraring Battery, whose first 460MW / 1,770MWh stage began generating revenue in December 2025, on the way to 700MW / 3,160MWh, roughly 4.5 hours of storage. Coal supply runs to December 2028 under a Centennial agreement for Myuna Colliery, with 75 to 85 per cent of anticipated FY27 Eraring consumption contracted or hedged.

In December 2025 Kraken completed its first standalone equity raising of US$1 billion at a valuation of US$8.65 billion, Origin investing about A$210 million to retain its interest. Separation from Octopus was targeted for mid-2026, with Kraken contracted across more than 90 million customer accounts globally.

Financial and Operational Position

For the half year to 31 December 2025, Origin reported statutory profit of $557 million against $1,017 million a year earlier, underlying profit of $593 million against $924 million, and underlying EBITDA of $1,589 million against $1,926 million. Energy Markets EBITDA rose $122 million to $860 million on a $102 million lift in electricity gross profit, while Integrated Gas EBITDA dropped to $860 million from $1,251 million and Octopus contributed a loss of $89 million on Origin's share.

Cash held up better than earnings. Adjusted free cash flow was $705 million, up $187 million, APLNG paid Origin $542 million in fully franked dividends, and the interim dividend was held at 30 cents fully franked. Adjusted net debt stood at $4,590 million, or 2.0 times adjusted underlying EBITDA — the bottom of the target range, against 1.9 times at 30 June 2025.

FY26 guidance was set at $1,550 million to $1,750 million of Energy Markets EBITDA, upgraded from $1,400–$1,700 million, with APLNG production of 645 to 680 PJ, LNG trading gains of $100–$150 million, capital expenditure of $900–$1,100 million and APLNG distributions of $700–$950 million.

Why the Development Matters

The financial cost of a data incident is rarely the response bill; it is remediation, regulatory follow-up and churn. Origin's average churn rate was 14.7% in the December half, high enough that modest deterioration would be measurable in a product close to a commodity in the customer's mind. A trust shock that slows acquisition chips at the Energy Markets line doing the heavy lifting.

A second-order angle is easy to miss. Origin's investment case now leans on Kraken, a platform whose pitch is managing utility customer data better than incumbent systems, and Origin is both a shareholder in and a customer of that ecosystem. Nothing disclosed connects the incident to Kraken — but investors will reasonably ask where the exposed data sat once a cause is identified.

Eraring's extension, by contrast, resolves a timing question. Running to April 2029 without further overhauls keeps a large, ageing, dispatchable asset earning through a period of tight supply while batteries and transmission catch up. The trade-off is exposure to coal availability, plant reliability and whatever the underwriting arrangement does to returns.

Risks and Challenges

The immediate risk is that the incident's scope proves larger than current disclosures imply. The escalation between 22 and 23 July shows how these assessments move, and a further widening — additional data categories, a supplier link, a very large customer number — would carry remediation cost and regulatory consequence. Class action exposure is a standard follow-on risk in Australian data cases, though none has been announced.

Earnings concentration is the structural issue. Integrated Gas EBITDA fell by nearly a third year on year in the December half, and APLNG's contribution swings with oil-linked pricing Origin does not control; the realised LNG price was US$9.51/mmbtu in the March quarter, when APLNG also deferred US$321 million of principal into FY27 and US$265 million into FY28 via refinancing.

Octopus is the volatile line. A guidance cut from a potential $150 million contribution to a possible $70 million loss inside one quarter, despite roughly 700,000 accounts added, shows how thin the visibility is on an unlisted offshore investment. Eraring carries its own operational risk: availability was 72.3% in the December half, and declining to fund further overhauls leaves less margin for unplanned outages.

What Investors Should Watch Next

The calendar is dense. A June-quarter report falls within days of the incident becoming public and the FY26 result follows on 13 August 2026 — both natural venues for Origin to put a number on the affected customer base and, if known, a cause.

Measurable indicators worth tracking:

  • Any follow-up ASX release quantifying affected customers or naming a cause.
  • Energy Markets accounts and churn at the FY26 result versus 4,791,000 and 14.7% at 31 December 2025.
  • Whether FY26 Energy Markets EBITDA lands inside the $1,550–$1,750 million guidance range.
  • APLNG full-year distributions against the $700–$950 million guidance.
  • Adjusted net debt against the $4,590 million reported at 31 December 2025.

Conclusion

Origin has handled the disclosure reasonably: two releases in two days, regulators engaged from the outset, an apology from the chief executive, and no attempt to minimise what remains unknown. But the story is unfinished, and without a customer count or a cause the financial consequence cannot be sized.

What can be assessed is the base it lands on. Origin enters this with an upgraded Energy Markets guidance range, gearing at the bottom of its target band, and a coal plant whose retirement has been pushed back far enough to let replacement batteries come online in an orderly way. The vulnerabilities sit elsewhere — in an LNG earnings stream that moves on price, and in an offshore retail investment whose guidance shifted by more than $200 million in three months. The harder tests were already on the calendar.