Qantas Investigates Major Data Breach Affecting Millions of Customers
Australian airline Qantas is investigating a significant data breach that may have exposed the personal information of up to six million customers, following a cyberattack on a third-party customer service platform.
The breach, which was detected on June 30, involved “unusual activity” in a system used by the airline’s contact center. The platform contained personal details such as names, email addresses, phone numbers, birth dates, and frequent flyer numbers. However, credit card details, passport information, and other financial data were not stored in the compromised system, according to Qantas.
In a statement, Qantas confirmed that the affected system was immediately secured after the breach was detected. The airline emphasized that there is no impact on flight operations or passenger safety and that customer accounts, passwords, and PINs remain uncompromised.
“We sincerely apologize to our customers and recognize the uncertainty this incident may cause,” said Qantas Group CEO Vanessa Hudson. “Our customers trust us with their personal information, and we take that responsibility seriously.”
She urged affected customers to use the dedicated support line for assistance.
Qantas has notified the Australian Federal Police, the Australian Cyber Security Centre, and the Office of the Australian Information Commissioner (OAIC), and is working with independent cybersecurity experts as part of its ongoing investigation.
The breach comes amid growing concerns over cybersecurity in Australia, which has experienced a number of high-profile attacks in recent years. In March, the OAIC reported that 2024 was the worst year for data breaches in the country since recordkeeping began in 2018.
The Qantas incident also follows a recent warning from the US FBI about increased cyber threats to the aviation sector, particularly from the Scattered Spider group. Other airlines, including Hawaiian Airlines and WestJet, have recently faced similar attacks.
As cybersecurity threats continue to rise, Australian Privacy Commissioner Carly Kind has called on businesses and government agencies to strengthen their data protection measures.
“The trends we are observing suggest the threat of data breaches, especially through the efforts of malicious actors, is unlikely to diminish,” Kind said in a recent OAIC statement.
Qantas shares fell by 3.5% in early trading following news of the breach, signaling investor concern amid the broader market’s slight gain. The airline says it will continue to provide updates as the investigation develops and is prioritizing customer communication and support.
