Overview
- Qantas detected unusual activity on June 30 in a third-party contact centre platform and immediately contained the breach.
- An initial review indicates that customer names, email addresses, phone numbers, birth dates and frequent flyer numbers for up to six million travellers may have been stolen.
- No credit card, personal financial or passport details were stored in the compromised system, and frequent flyer accounts, passwords and PINs remain secure.
- The airline has notified the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and the Australian Federal Police and is supporting their investigations.
- Forensic experts have identified hallmarks of the Scattered Spider hacker group, and Qantas has set up dedicated support lines to help affected customers with identity protection.