澳大利亚最大能源商Origin Energy遭攻击 480万客户数据泄露

澳大利亚最大能源零售商Origin Energy遭网络攻击，约480万客户的个人数据被泄露 1。泄露信息包括姓名、地址、出生日期、电话号码、账户信息、信用卡末四位数字和银行账户末三位数字 1。

网络安全专家警告，这次泄露可能带来多重风险。科廷大学应用伦理中心的Jacqueline Boaks指出，"公司必须做得更好"，批评该公司的通知延迟和被动措辞 1。拉筹伯大学网络安全讲师Rumpa Dasgupta表示，能源消费模式的泄露可能暴露住户在家或外出的时间规律、家电类型等信息，这些数据可被用于针对性诈骗或入室盗窃 1。新南威尔士大学高级讲师Rahat Masood补充道，即使支付细节未被泄露，个人信息仍可被利用进行针对性钓鱼、身份盗窃和社交工程攻击 1。

Australia's largest energy retailer, Origin Energy, suffered a cyberattack that compromised personal data for approximately 4.8 million customers 1. The exposed information includes names, addresses, dates of birth, telephone numbers, account details, the last four digits of credit cards, and the last three digits of bank account numbers 1.

Cybersecurity experts have warned that the breach creates multiple vectors for criminal activity beyond traditional phishing schemes. According to Rumpa Dasgupta, a cybersecurity lecturer at La Trobe University, the leaked energy consumption patterns could reveal when households are home or away and what types of appliances they use, information that could be weaponized for targeted scams or burglaries 1. Rahat Masood, a senior lecturer at the University of New South Wales, cautioned that even without complete payment details, the personal information disclosed is sufficient for targeted phishing attacks, identity theft, and social engineering schemes 1.

Jacqueline Boaks, director of the Applied Ethics Centre at Curtin University, criticized the company's response to the incident, stating that "the company must do better," and pointed to delays in notifying customers and the passive language used in communications 1.