Qantas customers hit by major data breach

The Qantas cyber attack in July 2025 resulted in the exposure of sensitive personal data of up to 6 million customers. The breach occurred through a third-party platform used by Qantas, specifically linked to its Manila call center. Here’s a summary of the incident:

Key Details

1. Compromised Data:

   • Names, email addresses, phone numbers, birth dates, and frequent flyer membership numbers were exposed.
   • Financial details, passwords, and identity documents were not compromised.

2. Attack Details:

   • The breach was part of a larger attack by a cybercrime group, Scattered Lapsus$ Hunters, targeting multiple global companies via Salesforce.
   • The hackers threatened to release the data unless a ransom was paid, which Salesforce refused.

3. Impact:

   • The stolen data has been leaked on the dark web, raising concerns about phishing scams and identity fraud.
   • Qantas confirmed that its core systems, including flight operations and booking systems, were unaffected.

4. Response:

   • Qantas is investigating the breach and working with cybersecurity experts.
   • Customers are being notified individually if their data was compromised.

5. Expert Advice:

   • Cybersecurity experts warn that the exposed data could be used for social engineering and phishing attacks. Customers are advised to verify any suspicious communications carefully.

For more details, you can refer to the sources:

• Bitdefender Blog