Qantas Contacted by Suspected Cybercriminal After Breach of 6 Million Customer Records

Qantas has confirmed that a cyberattack compromised the personal data of up to six million customers, including names, email addresses, phone numbers, dates of birth, and frequent flyer numbers, while financial details and passport information were not accessed. The attack targeted a third-party platform used by an offshore call centre, and although no evidence shows stolen data has been released, a potential cybercriminal has contacted the airline claiming responsibility, prompting Qantas to work with the Australian Federal Police and cybersecurity experts to investigate. Qantas has implemented additional security measures for frequent flyer accounts, including requiring extra identification for changes, and reassured customers that there is no impact on airline operations or safety. The airline's CEO Vanessa Hudson apologized for the breach and emphasized the seriousness with which Qantas is addressing cybersecurity. The incident has raised concerns about data privacy protections, with experts warning the stolen information could be repeatedly sold, and it may lead to legal action similar to prior breaches affecting Australian companies. Meanwhile, authorities continue to monitor the situation closely, but Qantas has not confirmed if any ransom demands were made.