Overview

• The attack on Monday targeted a third-party platform used by a Qantas contact centre, compromising service records for six million customers.
• Compromised data included customer names, email addresses, phone numbers, birth dates and frequent flyer numbers.
• Qantas confirmed the affected system did not store credit card details, passport information, passwords, PINs or full frequent flyer credentials.
• The airline contained the breach and enlisted federal agencies and independent cybersecurity experts to investigate, confirming no impact on operations or safety.
• Qantas is contacting affected customers to apologise and offer specialist identity-protection services.