Qantas confirms data on over one million customers leaked in major breach

Qantas revealed on July 9, 2025, that cybercriminals accessed personal data for approximately 5.7 million customers via a third-party call‑centre platform . Over 1 million records contained sensitive details, phone numbers, birthdates, and home addresses, while around 4 million included only names and email addresses. Crucially, the airline confirmed that no financial information, passwords, passport data, or Frequent Flyer account access was compromised.

The breach, one of Australia’s largest since the Optus and Medibank incidents, prompted the airline to alert affected customers with personalized notices and set up 24/7 support lines. CEO Vanessa Hudson announced enhanced cybersecurity measures and ongoing collaboration with the Australian Cyber Security Centre and Federal Police.

Experts warn that even basic personal information can fuel phishing and identity fraud, and note this attack likely leveraged “vishing” voice‑based social engineering to compromise a Manila call centre.

Source: www.reuters.com