What have we learnt from Origin Energy's data breach?

Three weeks ago, Origin Energy announced that 900,000 current and former customers had their personal data accessed. What have we learnt about our data safety online since?