Overview

• Qantas has begun emailing 5.7 million customers to detail which personal data fields were accessed in the breach
• For four million records, the leaked information was limited to names, email addresses and Frequent Flyer details, with a subset also including tier levels and points balances
• Among 1.7 million other records, hackers obtained additional data such as addresses, birth dates, phone numbers, gender and meal preferences
• No financial information, passport details or login credentials were compromised and Frequent Flyer accounts remain secure according to the airline
• The airline has engaged the Australian Federal Police and cybersecurity experts to verify communications with a suspected Scattered Spider gang, monitor for data leaks and strengthen system defenses