Overview

• Unusual activity was detected on June 30 in a third-party platform at one of Qantas’s contact centres and the system was contained by July 1.
• Preliminary analysis indicates service records for six million customers may have been accessed, including names, email addresses, phone numbers, birth dates and frequent flyer numbers.
• Qantas says no credit card details, personal financial records, passport information, passwords, PINs or login credentials were held in the compromised system and that flight operations remain secure.
• The airline has notified the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and the Australian Federal Police and is supporting their inquiries.
• Cybersecurity firm CyberCX identified hallmarks of the Scattered Spider group’s tactics as Qantas begins notifying affected customers and offering dedicated identity protection support.