Australian power company Origin Energy Limited said the recent data breach affects 900,000 current and former customers.

Origin Energy, which has roughly 4.8 million customers, is one of Australia’s largest electricity and gas retailers.

The company recently started investigating a cybersecurity incident and determined that threat actors gained access to customer data, including names, dates of birth, phone numbers, addresses, account information, and partial payment card or bank account numbers.

In an update shared on Tuesday, Origin revealed that it had been investigating a “potential security threat” since early July, but the initially available information suggested the threat was not credible. New information that came to light on July 22 confirmed the intrusion.

An individual claiming to be behind the Origin hack said that information from 2 million customers had been obtained and suggested it would all be leaked if the company refused to pay a ransom.

However, the alleged hacker later told The Australian [paywalled] that an agreement had been reached with Origin and no data would be released.

Origin Energy has not mentioned anything about reaching an agreement with the attacker.

In fact, the company’s CEO, Frank Calabria, stated, “Importantly, this is a criminal matter that is subject to an ongoing investigation by the relevant authorities, and given this, we are constrained by the level of information we can provide about the incident at this time.”

Even if the stolen data is not made public, Origin admitted that other threat actors could leverage the incident for scams.

Related: Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack

Related: DentaQuest Data Breach Potentially Impacts Over 23 Million People