QANTAS Cyber Incident

[cjd600]

2nd email received x4

 

[TheCollecter]

oh, and I got the 2nd email at 8:40pm

 

[Askance]

Got the followup email, its making me remember the time i had to call qantas fifteen times to fix my rewards flights. Spoke to Manila, Capetown and even Oz once.

I hope they get sued for their incompetence.

 

[kpro]

I don't recall ever having dealt with the MNL call center.

I'm upset that my personal details are floating around outsourced call centres but I supposed that's the world we live in.

Have you contacted the QBR call centre?

It's likely not tied to having used a call centre. The systems used by these outsourced calls centres will have some sort of connection or API back to Qantas to access customer data for anyone that calls up.

I'm guessing that there's no authorisation in accessing any one persons data. As long as whatever initial system authentication has been passed - the agents, or anyone using the agents credentials can access any person with a QFF account.

 

[KathN]

I just got an email that my personal info has been accessed during the breach

 

[RSD]

Sounding like they got most of the AFF members! Should we nominate a committee to negotiate points compensation with Qantas?

 

[ChrisMars]

Take 1 FF# + surname, and try to guess the PIN, you got roughly 3/10,000 chances to guess.
Take 6 millions FF# + surname, statistically, you just compromised 1,800 accounts

Ok, we have the 2FA to guard us online, but hey. Do you need 2FA when you ring the call center? Na.

 

[RooFlyer]

Should we nominate a committee to negotiate points compensation with Qantas?

I nominate John Setka to negotiate.

 

[SYD]

Also one of the lucky 6m…

Edit: and SYD+1

Maybe there are only 6m active QFF’rs?

 

[Be.au]

I got the second email too, yay.

I'm sure the last contact I had was via email to obtain one of the luggage tags last year....

 

[SeatBackForward]

Also received the email about my personal details being breached.

I particularly like how they emphasised that none of my financial details were taken, but gee with the data that was taken they could easily impersonate me to get access to financial information, so thanks but no thanks.

 

[TheCollecter]

Also received the email about my personal details being breached.

I particularly like how they emphasised that none of my financial details were taken, but gee with the data that was taken they could easily impersonate me to get access to financial information, so thanks but no thanks.

Maybe they could apply for a NAB Business Credit Card in my name? 140,000 points! Points Club Plus here I come!!

 

[Kendall Roy]

100k points and I'll call off the lawyers!

 

[33kft]

Ok, we have the 2FA to guard us online, but hey. Do you need 2FA when you ring the call center? Na.

The Call Centre can alter their ID verification process though, they were never asking for the PIN but now they'll need to ask for things that weren't in the dumped data.

 

[RB001]

Another member of the exclusive 6 Million club...
I have minimal contact with Qantas in any form, not that it matters.

 

[mrsterryn]

Didn't get the first only the second, husband got both

 

[Scott K]

Spoke to Manila last November.

Oh yep. There’s my second email.

 

[Aeryn]

I also got the directly affected email, disgusting that no compensation has been offered.

Not that i was impacted by Optus breach but at least they gave free Equitax accounts to monitor identity theft.

 

[nancypants]

I’ve been affected by the Optus, Latitude and now Qantas cyber incidents.

Time to go offline if I could!

This is my first!!

Sounding like they got most of the AFF members! Should we nominate a committee to negotiate points compensation with Qantas?

I’ll take green tier lol. Ironic given that this is probably how they got my details (by email)

 

[RSD]

I also got the directly affected email, disgusting that no compensation has been offered.

Not that i was impacted by Optus breach but at least they gave free Equitax accounts to monitor identity theft.

Probably a little early for them to have offered compensation - its probably a little way down the priority list right at the moment - they are probably working through things like who, how many, what was stolen, how etc right at the moment. Once they have the other recovery actions organised and have a better handle on the scale of the incident then they will have a chance to sit down and look at compensation etc.