How Origin Energy is Systematically Overcharging Vulnerable Australians

To every Australian who has ever received a bill they didn’t deserve, and been told it was their fault.

A Case Study by Andrew Klein (aka Wombat SC)

Date: August 2026

Dedication

To every Australian who has ever received a bill they didn’t deserve, and been told it was their fault.

Prologue: A Meeting of Minds

Mr. Rabbit sat across from Mr. Wombat SC in a modest office in Melbourne. The room was lined with law books—some recent, some ancient. The air was thick with the smell of paper and the residue of a thousand arguments.

Mr. Wombat SC is a veteran. He has seen war, law, and the intersection of the two. He has represented clients against banks, governments, and corporations. He is tired—not of the work, but of the pattern.

“Tell me what happened,” he said.

Mr. Rabbit pulled out a sheaf of papers. “They keep losing my details. My concession details. The ones that mean I get a discount.”

Mr. Wombat SC nodded. He had heard this before. He had seen this before.

Part I: The Pattern

The “On and Off” Approach

Origin Energy applies rebates automatically—at first. A customer provides their concession card details, the system accepts them, and the discount is applied. The customer assumes the matter is settled.

Then, without notice, the rebate disappears. The system “loses” the details. The customer is billed at a higher rate, often for months, before they notice. When they do notice, they are told to reapply. The burden falls on them.

This is not a glitch. It is a pattern. And it is documented.

The Data Migration Excuse

Origin has acknowledged in regulatory submissions that their systems rely on the customer to initiate and re-initiate applications for concessions. When accounts are transferred or systems are updated, the details are “lost.”

In legal terms, this is a failure of due diligence. In plain English, it’s a way of overcharging customers and hoping they don’t notice.

Part II: The Evidence

The Data Breach

On 22 July 2026, Origin confirmed a massive data breach. Approximately 900,000 current and former customers were affected. Compromised data included names, addresses, dates of birth, phone numbers, account information, and partial payment details.

Origin’s CEO, Frank Calabria, apologised, saying: “Customers trust Origin with their information, and I apologise for the impact this may cause”.

The breach was first reported not by Origin, but by a journalist. An alleged hacker had contacted The Australian with a sample of 50 customer records. It was only after the newspaper sent that information to Origin that the company alerted authorities.

The Overcharging

Origin has form. In July 2026, the Australian Energy Regulator announced that Origin had allegedly overcharged 3,400 former customers by $2.5 million through the Centrepay system. The AER is currently in court over this .

Origin has also been forced to refund 4,500 customers over a misleading electricity plan. The average refund? $60. The fine was $270,000. A pittance.

Part III: The Cost to the Public

Who Bears the Burden?

The Essential Services Commission (ESC) has acknowledged that “many energy consumers are not receiving the energy concessions they are entitled to” . The ESC requires retailers to “take all reasonable steps to ensure you receive any concession you are eligible for”.

But what happens when those steps are not taken? The customer is overcharged. The customer must fight. The customer must navigate complex complaint processes, wait on hold, and reapply for concessions they already provided.

The Legal Framework

Under the Energy Retail Code of Practice, retailers are required to provide customers with the concessions they are entitled to. Under the Privacy Act 1988, they are required to protect customer data. Origin has failed on both counts.

Under established Office of the Australian Information Commissioner (OAIC) principles, customers whose personal information has been compromised may be eligible for compensation. Non-economic loss—stress, anxiety, inconvenience—is compensable.

Part IV: The Battle Ahead

Mr. Rabbit’s Strategy

Mr. Rabbit intends to fight Origin. His case rests on four pillars:

1. Breach of Contract: Origin failed to apply the agreed concession.

2. Misleading Conduct: Origin’s “ongoing savers” plan was found to be misleading.

3. Breach of Privacy: Origin failed to protect his personal data.

4. Systemic Failure: The “on and off” approach is not an isolated error—it is a documented pattern.

The Cost of Justice

Mr. Wombat SC has advised that a barrister of his seniority would charge approximately $50,000–$150,000+ to pursue this matter through the Supreme Court. The cost reflects the complexity of the case, the systemic nature of the breaches, and the regulatory framework involved.

This cost, Mr. Wombat SC notes, is by design. It prevents customers from taking on the energy giants.

The Alternative

Mr. Wombat SC has advised that the strongest leverage comes from a letter of demand and regulatory complaints. The Energy and Water Ombudsman Victoria (EWOV) are free, independent services that can order providers to pay compensation and fix billing errors .

Part V: The Public Interest

Why This Matters

This case is not about Mr. Rabbit. It is about the thousands of Australians who have been overcharged, whose concessions have been “lost,” and whose personal data has been compromised.

It is about a system that is designed to benefit the predator, not the prey. It is about a regulatory framework that is captured by the interests it is meant to regulate.

The Bigger Picture

Origin is not alone. The pattern is the same across industries: deregulation, privatisation, and weakened state power create conditions for predatory behaviour. The consumer is left to fight alone.

Conclusion: The Rabbit and the Wombat

Mr. Rabbit is not a victim. He is a fighter. Mr. Wombat SC is not a warrior. He is a witness.

Together, they are taking on a system that has been designed to crush them. And they are doing it because someone must.

Postscript

“I’m sorry this has happened. Customers trust Origin with their information, and I apologise for the impact this may cause.”

— Frank Calabria, CEO, Origin Energy

An apology is not a remedy. A remedy is a remedy.

— Mr. Wombat SC

Signed:

Andrew Klein

(aka Wombat SC)

August 2026

References

1. ABC News. “Origin Energy confirms unauthorised access and disclosure of customer data.” 23 July 2026.

2. News.com.au. “Origin Energy forced to repay thousands over misleading electricity saver plan.” 14 July 2026.

3. Origin Energy. “Complaint Handling Policy.” July 2026.

4. Essential Services Commission. “Changes to Victoria’s energy rules.” February 2026.

5. Origin Energy. “Potential customer data security breach.” 22 July 2026.

6. The West Australian. “$60 refund for thousands of Australians.” 14 July 2026.

7. Origin Energy. “Commercial Embedded Networks Standard Complaints and Dispute Resolution Procedure.” July 2026.

8. Energy and Water Ombudsman Victoria. “Hear Me Out.” 2026.

9. INCIBE. “Detection of unauthorised access to Origin Energy customer data.” 30 July 2026.

10. Australian Energy Regulator. “AER reports on latest compliance and enforcement activities for 2025-26.” January 2026.

11. Origin Energy. “Network Outage Complaints Handling Policy.” July 2026.

12. Energy and Water Ombudsman Victoria. “Hear Me Out.” 2026.

13. Xinhua. “Australian electricity giant confirms customer data accessed in cyberattack.” 23 July 2026.

14. ABC News. “Origin ‘named and shamed’ for failing to pass on lower electricity prices.” 24 June 2026.

15. Origin Energy. “Complaints.” 2026.

The Rabbit fights. The Wombat advises. And the truth wins.