Qantas has revealed that 5.7 million customer records were compromised in last week’s data breach, impacting nearly the entire 6 million user base connected to the affected system.
The airline has begun notifying customers with specific details about what personal data was accessed by cybercriminals.
Of the total affected, 4 million customer records included names, email addresses, and Qantas Frequent Flyer details.
Among them, 1.2 million records contained only names and emails, while 2.8 million also included Frequent Flyer numbers, and in most cases, their membership Status Tier.
A smaller subset of this group also had their Points Balance and Status Credit balance exposed, potentially making them high-value targets for scammers.
The remaining 1.7 million records included combinations of the above data, with additional sensitive fields such as addresses (1.3 million), dates of birth (1.1 million), phone numbers (900,000), gender (400,000), and meal preferences (10,000).
Qantas CEO Vanessa Hudson stated that the company’s primary focus has been to identify what data was compromised and inform affected customers as quickly as possible.
Customers are now being contacted directly with details about which personal data fields were involved and are being offered support services.
The airline has also implemented additional cybersecurity measures and is continuing to work closely with the Australian Federal Police, the National Cyber Security Coordinator, and the Australian Cyber Security Centre.
While none of the compromised data has yet appeared online or on the dark web, Qantas has reportedly been contacted by a potential cybercriminal, and the matter is under active investigation.
Authorities warn that cybercriminals may leak small samples of the stolen data online to demand ransom or validate their claims.
Qantas customers are advised to remain vigilant and watch for suspicious calls, emails, or text messages pretending to be from the airline.
