Origin Energy, Australia's largest energy retailer, has warned customers of heightened scam risks after a cyber attack exposed personal data for nearly five million accounts.The breach, affecting 4.8 million customers, revealed sensitive information including names, addresses, dates of birth, phone numbers, and partial financial details.Experts caution that phishing scams may not be the only threat, as attackers could exploit this data for targeted fraud or physical crimes.Origin has urged customers to remain vigilant, avoid clicking suspicious links, and report scams to Scamwatch.

The company emphasized that it would never request passwords via email or phone, advising users to verify website addresses and use secure payment methods through its app or website.

Critics argue Origin's response has been inadequate, citing delayed notifications and minimising language that downplays the breach's severity.

The incident highlights broader concerns about cybersecurity in essential services, with experts calling for stricter accountability measures to prevent future breaches and protect consumer data.