Qantas Airways said a cyberattack compromised the personal details of around six million customers, marking one of Australia's most significant data breaches in recent years.
The airline has disclosed that a hacker accessed personal data via a third-party customer service platform, in what the airline described as a major cyber security breach.
The compromised information includes names, contact details, birth dates and frequent flyer numbers, though Qantas said passwords, PINs and login credentials were not affected. There was no impact on flight safety or operations, the airline said.
The breach was detected after unusual activity was noticed on a call centre platform operated by an external vendor. Qantas has not identified the vendor or the specific group responsible but confirmed the incident is under investigation.
“We are continuing to investigate the proportion of the data that has been stolen, though we expect it will be significant,” Qantas said in a statement.
The airline reported the incident to the Australian Cyber Security Centre, the Office of the Australian Information Commissioner, and the Australian Federal Police. The ACSC declined to comment, while the AFP said only that it was aware of the incident.
The U.S. Federal Bureau of Investigation recently warned that a cybercrime group known as Scattered Spider has been targeting airlines. Although Qantas has not attributed the attack to any specific group, cybersecurity experts said the incident shared hallmarks of similar breaches.
Charles Carmakal, chief technology officer at Mandiant, a cybersecurity firm owned by Alphabet, said it was too early to confirm if Scattered Spider was responsible. However, he warned that airlines globally should be on “high alert” for social engineering attacks.
Mark Thomas, Australian director at cybersecurity company Arctic Wolf, said the apparent scale and coordination of recent airline breaches is “particularly alarming.”
Qantas shares were down 2.4% in afternoon trading, underperforming the broader market, which was up 0.8%.
The breach comes at a sensitive time for the airline, which is attempting to rebuild trust following reputational damage during and after the COVID-19 pandemic. The carrier previously faced public backlash over mass layoffs, cancelled ticket sales, and controversy surrounding its influence on government aviation policy.
Chief Executive Vanessa Hudson, who took office in 2023, said the airline was taking the incident seriously.
“We recognise the uncertainty this will cause,” she said. “Our customers trust us with their personal information and we take that responsibility seriously.”
The incident is among the most high-profile cyber breaches in Australia since attacks on telecommunications giant Optus and insurer Medibank in 2022. Those cases led to tougher cyber resilience laws, including mandatory compliance and incident reporting.
Oil prices fell after the U.S. expanded economic sanctions on Iran, as Tehran vowed to retaliate and warned it had tools to respond, raising concer...
Online fast-fashion retailer Shein is seeking to raise up to $1.77 billion in a Hong Kong IPO after its valuation fell around 70 per cent from its ...
Armenia's efforts to move closer to the European Union have gained political momentum in Yerevan, but the c...
Iran on Saturday denounced U.S. plans to announce new sanctions that could put further strain on the Islamic Republic's economy and have an impact on its most important trading partners including China.
Ukraine’s President Volodymyr Zelenskyy said on Monday that Kyiv wants peace but will not surrender to Russia, as foreign leaders joined Independence Day events marking 35 years since Ukraine’s independence.
A newly created pro-government political party has secured a commanding victory in Kazakhstan's snap parliamentary election, according to exit polls, strengthening President Kassym-Jomart Tokayev's influence at a pivotal moment in the country's political transition.
Only four commodity vessels crossed the Strait of Hormuz on Sunday, following 13 transits a day earlier, as disruptions continue to restrict traffic through the key energy chokepoint.
Ukrainian President Volodymyr Zelenskyy has rejected calls for a wartime election, arguing that holding a vote while Russia's full-scale invasion continues would divide the country and undermine national unity.
The United States has formally removed Syria from its list of state sponsors of terrorism, ending a designation that had been in place for nearly five decades and marking a major step in Washington's efforts to rebuild relations with the country's new leadership.
The Trump administration has announced plans to revoke the temporary visitor visas of foreign nationals who entered the United States on tourist or business visas and later sought asylum, marking the latest expansion of Washington's immigration enforcement policies.
At least 47 people were killed when armed gangs launched a deadly overnight assault on the Haitian town of Kenscoff, underscoring the worsening security crisis that continues to grip areas surrounding the capital, Port-au-Prince.
The U.S. Supreme Court has allowed President Donald Trump's administration to move forward with parts of an executive order aimed at tightening rules around mail-in voting, marking a significant legal victory for the White House ahead of November's midterm elections.
Ukraine’s President Volodymyr Zelenskyy said on Monday that Kyiv wants peace but will not surrender to Russia, as foreign leaders joined Independence Day events marking 35 years since Ukraine’s independence.
You can download the AnewZ application from Play Store and the App Store.
What is your opinion on this topic?
Leave the first comment