Particle.news

Download on the App Store

Qantas Contains Cyberattack After Data of Six Million Customers Exposed

Regulatory oversight alongside law enforcement support underpins Qantas’s probe into the extent of stolen data.

Qantas planes sit at Sydney Airport's domestic terminal on July 2, 2025.
MELBOURNE, AUSTRALIA - OCTOBER 31:  A Qantas aeroplane takes off at Melbourne Airport on October 31, 2011 in Melbourne, Australia. Qantas flights are expected to return to the skies at 2:00pm today, after a decision by Fair Work Australia to terminate the industrial action that grounded the airline from Saturday.  (Photo by Scott Barbour/Getty Images)
Image
A hooded man holds a laptop computer as blue screen with an exclamation mark is projected on him in this illustration picture taken on May 13, 2017. REUTERS/Kacper Pempel/Illustration/ File Photo

Overview

  • Qantas detected unusual activity on June 30 in a third-party contact centre platform and swiftly contained the breach with no impact on flight operations or safety.
  • The compromised system held service records for up to six million customers, exposing names, email addresses, phone numbers, birth dates and frequent flyer numbers.
  • The airline confirmed that credit card details, personal financial information, passport data, account passwords and PINs were not stored on the affected platform.
  • Qantas has notified the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and the Australian Federal Police, and has set up a dedicated support line for affected customers.
  • Cybersecurity firm CyberCX has indicated the breach bears the hallmarks of the Scattered Spider hacker group, though formal attribution remains unconfirmed as Qantas investigates the full extent of data theft.