Particle.news

Download on the App Store

Qantas Contains Hack That May Have Exposed Data of Six Million Customers

After securing its systems Qantas has begun notifying customers as it investigates how much data was stolen.

Six million customers may have been impacted in a Qantas cyberattack.
Qantas confirmed that the stolen data includes customer names, email addresses, and phone numbers, but assured customers that credit card and passport details, as well as passwords, were not accessed.
Sydney, Australia - November 26, 2017: Qantas Longreach 747 VH-OJT "Fraser Island" taking off from Sydney Airport, with domestic terminal in background.

Overview

  • Qantas detected unusual activity on June 30 in a third-party contact centre platform and immediately contained the breach.
  • An initial review indicates that customer names, email addresses, phone numbers, birth dates and frequent flyer numbers for up to six million travellers may have been stolen.
  • No credit card, personal financial or passport details were stored in the compromised system, and frequent flyer accounts, passwords and PINs remain secure.
  • The airline has notified the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and the Australian Federal Police and is supporting their investigations.
  • Forensic experts have identified hallmarks of the Scattered Spider hacker group, and Qantas has set up dedicated support lines to help affected customers with identity protection.