Skip to content Skip to footer

Closer to Home: Origin Energy’s Breach Traced to a Manila Call Centre

THE BIG DEAL The theft of personal data on about 900,000 current and former Origin Energy customers has been linked to a former employee at Accenture’s Manila call centre, which runs Origin’s customer support, the ABC reported on 18 August. The individual allegedly sought payment for the data’s return. Origin dismissed the first warning in early July, then confirmed the scale after a journalist received 50 sample records. On 21 August it disclosed that for dozens of customers the stolen data extended to full bank details and identity document numbers. The records were readable in Manila because Origin’s outsourcing contract put them there. The extortion attempt only cashed in on that decision.

TAKEAWAY Offshoring a process offshores the data with it. Where customer records must be handled abroad, hand over the minimum, mask what the task does not need, and keep the audit trail of every export in Australia; sovereignty is decided in the contract, not at the border.

You cannot monitor what you haven’t mapped. You cannot protect what you haven’t found. DISCOVER is step one of the GuardWare data-first security sequence. INSIGHT monitors everything including AI. PROTECT encrypts every sensitive file, so data that leaves your environment is worthless to anyone without your keys.

Subscribe to our newsletter and stay ahead of the breaches.

Download Data Risk Assessment Report..

Download Data Discovery Assessment Report..

Webinar

The Insider Threat You Can't Fire: Cybersecurity in Education.

Jun 24, 2026 12:00PM AEST