澳大利亚最大能源零售商Origin Energy确认遭遇黑客入侵,约90万名现有和前客户的个人数据被非法访问[1]。该公司首次收到黑客威胁邮件的时间为7月2日,但直到7月22日获得数据确实被访问的证据后才向公众披露此事,隐瞒期间长达三周[1]。
被泄露的数据包括客户姓名、地址、出生日期、电话号码、账户信息以及支付卡最后四位数字或银行账户最后三位数字[1]。Origin Energy总客户账户数达480万[1]。首席执行官Frank Calabria表示:"我们为此道歉。我们不能辜负客户对Origin的信任,我们正致力于提供支持。"[1] 该公司称不认为任何信息已被上传至暗网[1]。
Australia's largest energy retailer Origin Energy has confirmed that approximately 900,000 current and former customers have had their personal data illegally accessed in a cyber attack [1]. The company first received a threatening email from the attacker on July 2, but did not disclose the breach publicly until July 22—a gap of roughly three weeks—after obtaining evidence that data had actually been compromised [1].
The compromised information includes customer names, addresses, dates of birth, telephone numbers, account details, and partial payment card information, specifically the last four digits of credit cards or the last three digits of bank accounts [1]. Origin Energy operates approximately 4.8 million customer accounts in total [1]. The company stated it does not believe any of the accessed information has been uploaded to the dark web [1].
Chief Executive Officer Frank Calabria responded to the incident by saying: "We are sorry. We don't take for granted the trust customers place in Origin and we're here to support them" [1].