Qantas suffers cyber attack, exposing personal details of 6 million customers
A cyber attack occurred at one of Qantas' contact centres, which compromised a third-party platform that stored the personal information of six million customers, a significant amount of which was stolen.
QANTAS CYBER INCIDENT
Qantas discloses cyberattack amid Scattered Spider aviation breaches
According to Qantas, the cyber attack was detected on Monday, June 30, 2025. The attack was on a third-party platform used in the contact center, and although the attack was successfully contained and the platform is now secure, it appears that a significant amount of the information of 6 million customers stored on the platform was leaked.
The investigation confirmed that the stolen data included customer names, email addresses, phone numbers, birth dates, and frequent flyer numbers, but no credit card or personal financial information was included, and no frequent flyer passwords, PINs, or login information were included.
Qantas reports that it is 'working closely with the Federal Government's National Cyber Security Coordinator and the Australian Cyber Security Centre, as well as independent specialist cyber security experts.'
In addition, BleepingComputer, a news site that specializes in security-related matters, points out that this crime may have been carried out by a hacker group named 'Scattered Spider' by security companies, as the group has been targeting the aviation and transportation industries.
Scattered Spider is a group also known by the aliases '0ktapus', 'UNC3944', 'Scatter Swine', 'Starfraud' and 'Muddled Libra', and is characterized by social engineering and identity-based attacks. Typically, they use phishing, SIM swapping, MFA bombing, help desk calls, etc. to gain access to employee credentials.
Most recently, they are known to have attacked insurance company Aflac.
Insurance company Aflac announces that a 'sophisticated cybercrime group' may have infiltrated its systems and stolen customer data; the culprit may be Scattered Spider, which targets specific industries - GIGAZINE
in Note, Posted by logc_nt