Particle.news
Download on the App Store

Qantas Data on 5.7 Million Customers Posted Online After July Breach

Authorities warn of phishing risks after hackers posted data stolen via a third‑party contact system.

Overview

  • Hacker collective Scattered LAPSUS$ Hunters published the dataset on dark‑web sites after a ransom deadline passed.
  • Qantas says most exposed records contain names, email addresses and Frequent Flyer details, with smaller subsets including addresses, dates of birth, phone numbers, gender and meal preferences, and no financial or passport data.
  • Investigations point to social‑engineering of a Salesforce‑linked contact centre as the entry point rather than a direct exploit of Qantas systems.
  • Qantas has an ongoing NSW Supreme Court injunction, is working with the Australian Cyber Security Centre and Federal Police, and is providing a 24/7 support line with identity‑protection services.
  • Government ministers urged people not to access the leaked files as experts flagged a likely surge in targeted scams, while Maurice Blackburn lodged a privacy complaint and some New Zealand customers were also affected.