Qantas Data Breach: Millions of Customers Affected by Cyberattack

A significant cyberattack on Qantas Airways has exposed the personal data of millions of customers, sparking investigations and raising concerns about the security of sensitive information within the airline industry. The breach has prompted immediate action, with the airline notifying affected individuals and authorities.

Details of the Data Breach

Qantas has reported a data breach that may involve a “significant” amount of customer data. The airline detected unusual activity on a third-party platform used by its contact center. Reportedly, the platform held service records for around six million Qantas customers.

The compromised data includes customer names, email addresses, phone numbers, birth dates, and frequent flyer numbers, according to Qantas. However, the airline stated that critical details like credit card information, financial data, and passport details were not stored on the affected system.

“No frequent flyer accounts were compromised nor have passwords, PIN numbers or log in details been accessed,” the airline stated. Affected customers will be informed, and the system has been quarantined.

Possible Hacker Group Implicated

Cybersecurity firm **CyberCX** is collaborating with Qantas to address the incident. Initial assessments indicate that the attack bears the hallmarks of the “Scattered Spider” hacking group. The group is known for targeting various business sectors, most recently financial and insurance companies.

The FBI and CISA are aware of reports of a cyberattack targeting Qantas Airways. We are working with aviation and industry partners to address this activity and assist victims. https://t.co/s8hW3W75b2

— FBI (@FBI) May 27, 2024

The FBI has alerted that this cybercriminal group focuses on “large corporations and their third-party IT providers.” This suggests that any entity within the airline ecosystem, including vendors and contractors, could be at risk. According to a recent study, the average cost of a data breach in the transportation sector is around $4.2 million (Statista 2024).

Qantas Response and Future Actions

Qantas CEO, **Vanessa Hudson**, has extended an apology to those affected by the breach, acknowledging the uncertainty it creates. The airline emphasized its commitment to safeguarding customer information, recognizing the importance of trust.

“Our customers trust us with their personal information and we take that responsibility seriously,” she said in a statement. Qantas has set up dedicated customer support lines and will keep customers updated via a specific page on its website.