The company became aware of "unusual activity" on June 30 concerning the platform storing sensitive data, including names, email addresses, phone numbers, birth dates, and frequent flyer numbers. Following the detection, Qantas took prompt measures to contain the issue. Although the extent of the breach is still under investigation, Qantas anticipates that a substantial amount of data may have been accessed.
Significantly, Qantas reassured its customers that highly sensitive information, such as passport details, credit card numbers, and financial data, were not a part of the compromised system. Additionally, there were no breaches concerning frequent flyer account details, passwords, or PIN numbers.
The airline has been proactive in notifying relevant authorities, including the Australian Federal Police, the Australian Cyber Security Centre, and the Office of the Australian Information Commissioner. Vanessa Hudson, CEO of Qantas Group, expressed her regret over the incident, acknowledging the anxiety it may cause among customers. She encouraged anyone with concerns to reach out to a dedicated support line.
The timing of this attack is particularly alarming, as just days earlier, the FBI issued a warning highlighting that the airline industry is currently a target for cybercriminal groups like Scattered Spider. Other airlines, including US-based Hawaiian Airlines and Canada's WestJet, have faced similar attacks recently.
This incident adds to a series of notable data breaches in Australia this year, which includes significant incidents involving companies like AustralianSuper and Nine Media. The Office of the Australian Information Commissioner reported that the previous year marked the worst record for data breaches in Australia since 2018, with Australian Privacy Commissioner Carly Kind urging heightened security measures across both the public and private sectors to mitigate the risk of future attacks.
With the prevalence of these cyber threats on the rise, stakeholders are now under pressure to reinforce their data protection strategies.
Get our flagship newsletter with all the headlines you need to start the day. Sign up here.
Data breaches
Cyber-attacks
Qantas
Australia
Technology
Significantly, Qantas reassured its customers that highly sensitive information, such as passport details, credit card numbers, and financial data, were not a part of the compromised system. Additionally, there were no breaches concerning frequent flyer account details, passwords, or PIN numbers.
The airline has been proactive in notifying relevant authorities, including the Australian Federal Police, the Australian Cyber Security Centre, and the Office of the Australian Information Commissioner. Vanessa Hudson, CEO of Qantas Group, expressed her regret over the incident, acknowledging the anxiety it may cause among customers. She encouraged anyone with concerns to reach out to a dedicated support line.
The timing of this attack is particularly alarming, as just days earlier, the FBI issued a warning highlighting that the airline industry is currently a target for cybercriminal groups like Scattered Spider. Other airlines, including US-based Hawaiian Airlines and Canada's WestJet, have faced similar attacks recently.
This incident adds to a series of notable data breaches in Australia this year, which includes significant incidents involving companies like AustralianSuper and Nine Media. The Office of the Australian Information Commissioner reported that the previous year marked the worst record for data breaches in Australia since 2018, with Australian Privacy Commissioner Carly Kind urging heightened security measures across both the public and private sectors to mitigate the risk of future attacks.
With the prevalence of these cyber threats on the rise, stakeholders are now under pressure to reinforce their data protection strategies.
Get our flagship newsletter with all the headlines you need to start the day. Sign up here.
Data breaches
Cyber-attacks
Qantas
Australia
Technology
