Qantas has confirmed that customer data was released on the dark web following a cyberattack that occurred in September 2023. The airline initially detected unusual activity on its network and launched an investigation. The data,which surfaced in March 2024,includes names,email addresses,dates of birth,and frequent flyer numbers. While Qantas states that no passport details or credit card information were compromised, the exposed data still presents a significant risk to affected individuals.
The breach is believed to have been carried out by a sophisticated cybercriminal group. Qantas has been working with cybersecurity experts to contain the incident and mitigate the damage. The airline has also notified relevant authorities, including the Australian Information Commissioner.
The types of data exposed in the qantas breach include:
Crucially, Qantas has stated that passport details and credit card information were not compromised in this particular incident. However, the exposed data can still be used for phishing attacks and identity theft.
The Qantas data breach affects a significant number of customers. While the exact number of individuals impacted is still being determined, Qantas is in the process of notifying all affected customers directly. Anyone who has flown with Qantas or is a member of the Qantas Frequent flyer program is potentially at risk.
The impact extends beyond just Qantas customers. The compromised data could be used to target individuals through phishing scams and other fraudulent activities. It's crucial for all individuals to be vigilant and take steps to protect their personal information.