Synergy, Western Australia’s largest state-owned electricity generator and retailer, has allegedly been compromised in a significant data breach. The incident involves the unauthorized exposure of 900,002 customer registrations, which have recently been listed for sale by a threat actor on a data leak forum. The exposed database reportedly contains detailed subscriber information pertaining to both outstanding and ongoing payments.
The allegedly compromised data includes:
-
Full names (first and last names)
-
Dates of birth
-
Phone numbers
-
Email addresses
-
Physical addresses
-
Client and Account IDs
-
National Metering Identifiers (NMI)
-
Billing data (account balances, payment status, and BPAY references)
-
System metadata (node and export version information)
