A recent data breach at Origin Energy has made headlines, with the company downplaying the severity of the incident by assuring customers that their credit card information is secure. However, the hacker claims to have attempted to report the vulnerability to the company without receiving a response. The two parties have since reached an agreement, potentially involving a payment or promises regarding data deletion. Despite this, there is no guarantee that the stolen data has been fully eliminated. The breach highlights the complexities of incident response and the challenges of verifying the effectiveness of data deletion. Technical details of the breach, including any potential vulnerabilities exploited by the hacker, have not been disclosed. The incident serves as a reminder that staying informed about security developments is crucial for defense against emerging threats1.