Qantas Cyber Attack Exposes Millions of Customer Data

Detection of unusual activity leads to concerns over sensitive customer information, prompting investigations and public apologies.

Qantas Airlines has reported a serious data breach affecting as many as six million customer profiles after a cyber attack targeted a third-party customer service platform. The breach was detected on June 30, revealing unusual activity that compromised data including names, email addresses, phone numbers, birth dates, and frequent flyer numbers. Qantas has assured its customers that their passport details, credit card information, and financial data were not stored on the compromised system, nor were any frequent flyer accounts, passwords, or PIN numbers impacted.

Following the detection, Qantas took immediate action to contain the breach and has contacted the Australian Federal Police, the Australian Cyber Security Centre, and the Office of the Australian Information Commissioner regarding the incident. Qantas Group CEO Vanessa Hudson extended an apology to customers, acknowledging the uncertainty that the breach may cause. She reassured customers that the airline's operations and safety remained unharmed.

This cyber attack follows recent alerts from the FBI, warning that the airline sector is currently a target for cybercriminal groups, including Scattered Spider. Other airlines, such as Hawaiian Airlines and WestJet, have suffered similar attacks in recent weeks. The frequency of data breaches in Australia has raised alarms, with high-profile incidents reported at AustralianSuper and Nine Media earlier in the year. According to the Office of the Australian Information Commissioner, 2024 is projected to be a record-breaking year for data breaches. Australian Privacy Commissioner Carly Kind has called for stronger security measures from businesses and government agencies to combat the rising threat of data breaches in both public and private sectors.