Origin Energy is investigating a potential data breach affecting up to 4.8 million customer accounts, after a hacker calling themselves “John Doe” claimed to hold records for two million Australians and issued a 14-day extortion deadline. Here's what the response so far reveals about incident response governance under Australia's Notifiable Data Breaches scheme.
OAIC has published a statement on the Instructure (Canvas) cyber incident, confirming Australian education providers have been affected and directing impacted parties to the entity first for privacy complaints and response handling.