In the news
Origin Energy Data Breach: Your Rights If You've Been Scammed
A Reddit thread on r/australia is filling up fast with Origin customers reporting fraudulent transactions after a data breach. If your financial details were exposed and you've lost money, this is not a 'sorry for the inconvenience' situation. This is a company that held your personal information and had legal obligations to protect it. Those obligations exist under Australian law, and you have rights worth knowing about right now, not after you've spent three weeks on hold.
What the law says
Under the Privacy Act 1988 (Cth), organisations that hold your personal information must take reasonable steps to protect it from misuse, interference, loss, and unauthorised access or disclosure. If Origin failed that obligation and you suffered loss as a result, that failure matters legally. The Australian Consumer Law also prohibits misleading or deceptive conduct, which can include how a company communicates (or fails to communicate) about a breach affecting you. If you have experienced fraudulent transactions, contact your bank immediately to dispute the charges, then document everything: screenshots, dates, amounts, and any correspondence from Origin. You may have grounds to lodge a complaint with the Office of the Australian Information Commissioner (OAIC). Compensation amounts and specific legal outcomes depend on your individual circumstances, so get independent legal advice before assuming what you are or are not entitled to.
Free tool
Refund Rights Checker →Related dispute guides
screwtheman.com is not a law firm and does not provide legal advice. This page gives general information on consumer rights and dispute pathways. For complex legal matters, consult a qualified lawyer or the relevant regulator.