ClosedHighNo fix needed
Qantas: 5.7M customers' data stolen from a contact-centre platform
Qantas contact-centre (third-party platform)
A cyber criminal accessed a third-party customer-service platform used by a Qantas contact centre. After deduplication, 5.7M unique customers were affected: names, emails, frequent-flyer details, and for some phone numbers, birth dates, addresses, gender and meal preferences. No passwords, PINs, card or passport data were taken.
Why this severity: Data breach of 5.7M customers
- Started
- Jun 30, 2025
- Closed
- Jul 9, 2025
Affected
- n/a
Fixed in
No fixed release yet
Timeline2
Advisories2
News & write-ups1
Notes & caveats
startedAt (Jun 30) is the detection date reported by Qantas, from memory; disclosure was Jul 2.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
