Qantas Data Breach Affects Six Million Customers: Key Details Unveiled

Qantas has confirmed that a cyber attack on a third-party platform has compromised the profiles of up to six million customers. The airline ensured that sensitive financial information remains secure while acknowledging the impact on customer trust.

Qantas has reported a significant data breach affecting the personal information of approximately six million customers. The Australian airline revealed that unusual activities were detected on June 30 on a third-party customer service platform that stores data including names, email addresses, phone numbers, birth dates, and frequent flyer numbers.

In a statement, Qantas confirmed that immediate actions were taken to contain the breach. The airline is currently investigating the full extent of the incident, indicating that a substantial amount of data may have been compromised. Importantly, they assured customers that no passport details, credit card information, or sensitive financial data was stored within the affected system, nor have any frequent flyer accounts, passwords, or PINs been breached.

Qantas has proactively notified the Australian Federal Police, the Australian Cyber Security Centre, and the Office of the Australian Information Commissioner about the incident. "We sincerely apologize to our customers for this breach and understand the uncertainty it causes," stated Qantas Group CEO Vanessa Hudson. She further emphasized that there would be no operational disruptions for the airline's activities nor any compromise to passenger safety.

This incident is part of a worrying trend in Australia, as the country has recently witnessed a series of significant data breaches, with other major entities like AustralianSuper and Nine Media also experiencing security lapses. A report from the Office of the Australian Information Commissioner (OAIC) highlighted 2024 as the worst year for data breaches since comprehensive records began in 2018.

Australian Privacy Commissioner Carly Kind urged businesses and government agencies to bolster their cybersecurity measures in light of these ongoing threats, stating that both sectors are susceptible to cyber attacks.