Overview
- Qantas detected unusual activity on June 30 on a third-party contact centre platform and fully contained the system by July 2.
- An initial review indicates that stolen data may include customer names, email addresses, phone numbers, birth dates and frequent flyer numbers.
- The airline confirmed that credit card details, personal financial information and passport data were not stored on the compromised platform.
- Affected customers are being contacted and offered specialist identity protection services and guidance to counter potential phishing and fraud attempts.
- Qantas’s shares fell 2.2% following the disclosure, highlighting investor concerns over third-party cybersecurity vulnerabilities.