QANTAS Cyber Incident

[Princess Fiona]

Qantas reporting a cyber incident at a call centre.

QANTAS news Room

 

[Flyerwin]

Important bit:

There are 6 million customers that have service records in this platform. We are continuing to investigate the proportion of the data that has been stolen, though we expect it will be significant. An initial review has confirmed the data includes some customers’ names, email addresses, phone numbers, birth dates and frequent flyer numbers.

Importantly, credit card details, personal financial information and passport details are not held in this system. No frequent flyer accounts were compromised nor have passwords, PIN numbers or log in details been accessed.

 

[SYD]

Could be any of many the QF related databases? QBR was down the other day.

 

[cove]

Just as this thread started one of our favourite sons let us know this was happening.

 

[opusman]

Should be worth at least 5000 pts compensation

 

[SYD]

Banner on the QF website.

https://www.qantas.com/au/en/support/information-for-customers-on-cyber-incident.html

 

[kamchatsky]

Given it is a 3rd party platform used by QF, I wonder if other airlines are impacted as a result of this.

Should be worth at least 5000 pts compensation

That's not going to happen, because:

"Importantly, credit card details, personal financial information and passport details are not held in this system. No frequent flyer accounts were compromised nor have passwords, PIN numbers or log in details been accessed."

 

[sudoer]

Given it is a 3rd party platform used by QF, I wonder if other airlines are impacted as a result of this.

My guess is it's their CRM. Anyone know what they use? Salesforce?

6 million is an unusual number of customer records - it's less than the total number of QFFs but undoubtedly more than other QFF adjacent programs like QBR, Qantas Wine, Qantas Shopping, etc.

They say no passport details stolen - but if it is their CRM, passport details may be at risk if customers' future PNR details were taken and those PNRs contain APIS data.

 

[AFF Editor]

We've been in touch with Qantas about this incident. You can read a summary of what we know so far here:

Qantas Cyber Attack: What You Need to Know

Around six million Qantas customers have been impacted by a cyber incident, where a criminal stole personal information including frequent flyer numbers and contact details.

www.australianfrequentflyer.com.au

 

[Must...Fly!]

Should be worth at least 5000 pts compensation

No problem, all taken back and then some on August 5th

 

[SeaWolf]

Some more details from the ABC:

Breaking: Qantas says 'significant' portion of 6m customers' data likely stolen

Qantas is warning a "significant" amount of customer data has likely been stolen from its records during a cyber attack against the airline on Monday.

www.abc.net.au

 

[sudoer]

We've been in touch with Qantas about this incident. You can read a summary of what we know so far here:

Qantas Cyber Attack: What You Need to Know

Around six million Qantas customers have been impacted by a cyber incident, where a criminal stole personal information including frequent flyer numbers and contact details.

www.australianfrequentflyer.com.au

So someone in Manila fell for social engineering. Sigh.

Could you ask if any PNR details were exposed?

 

[henrus]

Should be worth at least 5000 pts compensation

Nah I’d prefer an upgrade to first class on every flight for the next year thanks.

We've been in touch with Qantas about this incident. You can read a summary of what we know so far here:

Qantas Cyber Attack: What You Need to Know

Around six million Qantas customers have been impacted by a cyber incident, where a criminal stole personal information including frequent flyer numbers and contact details.

www.australianfrequentflyer.com.au

Interesting that is 6 million and Manila so those who’ve not been dealing with Manila are fine. I’d love to know how long that goes back time wise as well!

 

[ant-au]

There's been several cyber attacks overseas in the aviation sector recently (WestJet, Hawaiian Airlines). Wonder if it's related?

With so much outsourced in large org's, this is the easiest way into a company - through third parties who often don't have the same security standards.

 

[bcworld]

So someone in Manila fell for social engineering. Sigh.

"Hi...this is the CEO. I need that report right now!"

"OK".

 

[ab156]

So, within 36 hours the team identified "additional security measures" and were able to "strengthen system monitoring and detection.".

That is incredible work and the truth that the requirement for this investment in technology was previously not known, identified or discussed will be simple to justify when the representative proceeding commences.

 

[Flyerwin]

"Hi...this is the CEO. I need that report right now!"

"OK".

They can now deepfake video and audio, so that's not an impossibility...

 

[lovestotravel]

"Hi...this is the CEO. I need that report right now!"

"OK".

You can't help some people.

 

[Hadun]

Nah I’d prefer an upgrade to first class on every flight for the next year thanks

Including jetstar and qantaslink as well please.

who’ve not been dealing with Manila are fine

So just us bronze plebs calling in to book classic reward seats then?

"Hi...this is the CEO. I need that report right now!"

"But why do you need my login and password for that though?"

through third parties who often don't have the same security standards.

But think of the money that's been saved though ...

 

[opusman]

So far, Qantas says that an initial review shows that the stolen data contains the following data of some customers:

• Names
• Birth dates
• Frequent flyer numbers

If your PIN is your birth date, change it now!