Qantas has notified customers after a cyber attack affected a platform storing data for six million individuals. On June 30, the airline recognized "unusual activity" on the system, which contained sensitive information including names, email addresses, phone numbers, birth dates, and frequent flyer numbers. The airline assures customers that critical details such as passport information, credit card numbers, and personal financial data were not compromised during the breach. They have also confirmed that no frequent flyer accounts, passwords, or PINs are at risk.

In response to the discovery, Qantas acted swiftly to contain the breach and is currently conducting a comprehensive investigation to determine the extent of the situation. The company has reported the incident to the Australian Federal Police, the Australian Cyber Security Centre, and the Office of the Australian Information Commissioner.

Vanessa Hudson, Qantas Group CEO, expressed remorse for the breach and acknowledged the anxiety it could cause customers. She encouraged those concerned to reach out via a dedicated support line and reassured that there would be no interruptions to Qantas’ operations or the airline’s safety protocols.

This incident adds to a concerning trend of data breaches in Australia, following notable leaks affecting AustralianSuper and Nine Media in recent months. A report from the Office of the Australian Information Commissioner (OAIC) indicated that 2024 was the worst year on record for data breaches in Australia since 2018, with rising threats from malicious actors. Australian Privacy Commissioner Carly Kind has urged both public and private sectors to enhance security measures to protect sensitive data from future attacks.