QANTAS FREIGHT - CYBER INCIDENT

Qantas is continuing to respond to the cyber incident that resulted in customer data being compromised.

The incident occurred when a cyber criminal targeted one of our airline contact centres and gained access to a third-party customer servicing platform.

We sincerely apologise for this incident and recognise the uncertainty it has caused.

Our focus is now on updating customers on the types of their personal data that was accessed, so that we can provide the appropriate advice and support to those affected. 

Data that was compromised:

Qantas has progressed its forensic analysis of the customer data in the system that was compromised.??

There is no evidence that any personal data stolen from Qantas has been released, but with the support of specialist cyber security experts, we continue to actively monitor.?

Qantas has reconfirmed no credit card details, personal financial information or passport details were stored in this system and therefore have not been accessed.??

There continues to be no impact to Qantas Frequent Flyer accounts. Passwords, PINs and log in details were not accessed or compromised.? The data that was compromised is not enough to gain access to these Frequent Flyer accounts.??

Specific data fields vary from customer to customer. Our analysis has found: 

The majority of customer records that were compromised are limited to:

• Name and/or
• Email address and/or 
• Qantas Frequent Flyer number (and in some cases, tier, status credits and points balance). 

Some customer records include a combination of the ones above, and one or more of the following: 

• Address - This is a combination of residential addresses and business addresses including hotels for misplaced baggage delivery.
• Date of Birth 
• Phone number - (mobile, landline and/or business)
• Gender 
• Meal preferences.  

Customer records are based on unique email addresses, and customers with multiple email addresses may have multiple accounts.??

Read more on the Qantas website here.