Overview
- Origin began reviewing a potential security threat in early July and treated new information received on 22 July as evidence a breach had occurred.
- The company completed an initial review on Tuesday and concluded roughly 900,000 current and former customers had personal information accessed.
- Accessed fields may include names, addresses, dates of birth, phone numbers, account details and partial payment digits such as the last four of credit cards.
- Origin is contacting affected customers, has opened a dedicated hotline and is offering identity and cyber-support services while working with the ACSC, AFP and the privacy regulator.
- Media reports say an individual claiming responsibility contacted outlets and provided sample records and later suggested a private settlement, but authorities continue a criminal investigation and no widespread dark-web posting has been confirmed.