Overview

• Scattered Lapsus$ Hunters published Qantas customer records after the October 11/12 deadline, with an initial release also naming Vietnam Airlines, Gap, Fujifilm, Engie Resources and Albertsons.
• Qantas says exposed fields include names, email addresses, phone numbers, dates of birth and frequent flyer details, while credit card data, passport numbers and account logins were not included.
• US and French authorities seized a clear‑web BreachForums domain used by the group, yet the hackers continued to post the files on dark‑web channels and new clear‑web mirrors, and copies are circulating.
• Salesforce states it will not pay extortion demands and reports no indication its platform was compromised, with analysts attributing access to social engineering and abused integration tokens tied to third‑party systems.
• Qantas has an ongoing NSW Supreme Court injunction and is providing a 24/7 support line and identity protection advice, as security experts warn of targeted phishing and potential identity fraud.