Qantas Data Breach: Millions of Customers Affected by Cyberattack

A significant cyberattack on Qantas Airways has exposed the personal data of millions of customers, sparking investigations and raising concerns about the security of sensitive information within the airline industry. The breach has prompted immediate action, with the airline notifying affected individuals and authorities.

Details of the Data Breach

Qantas has reported a data breach that may involve a “significant” amount of customer data. The airline detected unusual activity on a third-party platform used by its contact center. Reportedly, the platform held service records for around six million Qantas customers.

The compromised data includes customer names, email addresses, phone numbers, birth dates, and frequent flyer numbers, according to Qantas. However, the airline stated that critical details like credit card information, financial data, and passport details were not stored on the affected system.

“No frequent flyer accounts were compromised nor have passwords, PIN numbers or log in details been accessed,” the airline stated. Affected customers will be informed, and the system has been quarantined.

Possible Hacker Group Implicated

Cybersecurity firm **CyberCX** is collaborating with Qantas to address the incident. Initial assessments indicate that the attack bears the hallmarks of the “Scattered Spider” hacking group. The group is known for targeting various business sectors, most recently financial and insurance companies.

The FBI and CISA are aware of reports of a cyberattack targeting Qantas Airways. We are working with aviation and industry partners to address this activity and assist victims. https://t.co/s8hW3W75b2

— FBI (@FBI) May 27, 2024

The FBI has alerted that this cybercriminal group focuses on “large corporations and their third-party IT providers.” This suggests that any entity within the airline ecosystem, including vendors and contractors, could be at risk. According to a recent study, the average cost of a data breach in the transportation sector is around $4.2 million (Statista 2024).

Qantas Response and Future Actions

Qantas CEO, **Vanessa Hudson**, has extended an apology to those affected by the breach, acknowledging the uncertainty it creates. The airline emphasized its commitment to safeguarding customer information, recognizing the importance of trust.

“Our customers trust us with their personal information and we take that responsibility seriously,” she said in a statement. Qantas has set up dedicated customer support lines and will keep customers updated via a specific page on its website.

Scammers Target Motorists with Phishing SMS Toll Payment Scheme

Drivers Warned About Fake Messages Requesting Payment Information

A new phishing scam is circulating, targeting motorists with fraudulent SMS messages that mimic official toll payment notifications. These deceptive texts aim to steal personal and financial information, urging drivers to remain vigilant and avoid falling victim to these malicious tactics.

The Scam Unveiled

Reports indicate that thousands of drivers recently received SMS messages falsely attributed to Ulys Péage, a French toll operator. These messages prompted recipients to pay a supposedly outstanding sum via a provided website link. The amounts requested were often small, such as €6.8, which might not raise immediate suspicion among drivers.

However, these SMS messages are entirely fraudulent. They do not originate from Ulys and are sent randomly to numerous motorists, including some who have never used French motorways.

Scammers are always coming up with new ways to try and steal your money. This time, they’re impersonating toll road companies and sending fake SMS messages. Here’s what you need to know to stay safe: example.com another.com

— World Today News (@worldtodaynews) January 1, 2024

“We inform you that the ULYS brand is currently used as part of a phishing campaign,” a company representative explained. “You may receive fraudulent emails or sms imitating e-mails/SMS Ulys or Vinci Autoroutes (colors, logo, etc.). The hackers behind these campaigns are thus trying to collect personal information and in particular the data from bank card from targeted customers. We invite you not to respond to these fraudulent e -mails/sms and not to click on the links or attachments that they might contain.”

—Ulys Spokesperson

According to recent statistics from the Federal Trade Commission, phishing scams have increased by 30% in the past year, with losses exceeding $10 billion (FTC Report 2024).

Protecting Yourself

The primary objective of the scammers is not to collect the small payment but to obtain motorists’ banking details. Motorists must exercise caution and avoid responding to suspicious SMS messages, emails, or clicking on any embedded links. Always verify the legitimacy of any payment request through official channels before providing any personal information.

Example of a phishing SMS message.

Law enforcement agencies advise motorists to report any suspicious activity immediately and to regularly review their bank and credit card statements for unauthorized transactions. Staying informed and cautious is crucial in protecting oneself from these evolving online threats.

breach

Qantas hit by cyber attack, leaving 6 million customer records at risk of data breach