QANTAS Cyber Incident

[RB001]

Flying kangaroo goes to ground on data breach

Qantas has sent emails to customers affected or potentially affected by a cyber attack, but it took two days for any of its senior executives to front the media.

www.abc.net.au

No real surprises here...

 

[justinbrett]

Flying kangaroo goes to ground on data breach

Qantas has sent emails to customers affected or potentially affected by a cyber attack, but it took two days for any of its senior executives to front the media.

www.abc.net.au

No real surprises here...

Completely different to the article I just read.

QF are working on a system and will be contacting everybody again next week to advise which specific data fields were breached, as they will be different for everybody.

They have not been asked for ransom yet.

https://www.news.com.au/travel/travel-updates/incidents/qantas-gives-update-on-mass-cyber-incident/news-story/66cd7e824a93650b001acb47e04b9ff2

 

[ausfox]

ausfox+1 has never phoned a. Qantas call centre. We both received the two emails early yesterday. Both WP.

 

[flyingsal]

Household of 4.
- 16 year old and I got the second email
- 12 year old and partner didn't.
None of us have ever used a call centre.

 

[Rourke]

Household of 4.
- 16 year old and I got the second email
- 12 year old and partner didn't.
None of us have ever used a call centre.

Virtually identical here. Kids' accounts were set up at the same time. Son breached, daughter not. I got an email, wife didn't

 

[offshore171]

Flying kangaroo goes to ground on data breach

Qantas has sent emails to customers affected or potentially affected by a cyber attack, but it took two days for any of its senior executives to front the media.

www.abc.net.au

No real surprises here...

They may well still be in the “we don’t know what we don’t know” stage.

I wouldn’t be surprised if they drip feed announcements of further breaches in coming days, such as additional data fields that were stolen, beyond those already announced, or more customers affected than originally thought.

 

[offshore171]

https://www.news.com.au/travel/travel-updates/incidents/qantas-gives-update-on-mass-cyber-incident/news-story/66cd7e824a93650b001acb47e04b9ff2

Article strongly reinforces the point that several of us made earlier:

He told news.com.au the ‘date-of-birth’ being leaked was of greatest concern.

“The kind of information that has been stolen, you use it everywhere … they define you. I can change my credit card number, it’s annoying and it’s a hassle, but I can ring up my bank and it’s done.

“But my name and my date of birth, these are things that are a little bit more permanent and in many ways these are just as frustrating to have leaked because those are things you actually can’t change. I can’t change my name very easily and I certainly can’t change my date of birth.”

‘Worried about is impersonation’

Dr Pearce said that a hacker obtaining your full name, date-of-birth, email or phone number are three pieces of personal data that may pave the way for a future “downstream attack”, and that as a cybersecurity expert, his biggest fear for impacted customers is impersonation.

“The biggest thing that we’re worried about is impersonation … where they [hackers] can pretend to be you with other businesses that you might be registered with.”

 

[Saab34]

Perhaps spend less on share buybacks and more on IT platforms.

 

[bussyboy]

Flying kangaroo goes to ground on data breach

Qantas has sent emails to customers affected or potentially affected by a cyber attack, but it took two days for any of its senior executives to front the media.

www.abc.net.au

No real surprises here...

No media interviews are going to provide any more answers than are already provided.
Such a beat up.

Qantas communication on this has been good: clear, concise, timely. As an impacted customer, i know all I need to know. As an indirect minor shareholder, I'm happy with the response and actions indicate swift detection of the issue and plans in place to deal with the situation and potential impacts.

Nobody needs to know minute details of how, who, etc. Just that lessons are learned, and any strengthening of protocols and procedures are made.

 

[justinbrett]

Article strongly reinforces the point that several of us made earlier:

He told news.com.au the ‘date-of-birth’ being leaked was of greatest concern.

“The kind of information that has been stolen, you use it everywhere … they define you. I can change my credit card number, it’s annoying and it’s a hassle, but I can ring up my bank and it’s done.

“But my name and my date of birth, these are things that are a little bit more permanent and in many ways these are just as frustrating to have leaked because those are things you actually can’t change. I can’t change my name very easily and I certainly can’t change my date of birth.”

‘Worried about is impersonation’

Dr Pearce said that a hacker obtaining your full name, date-of-birth, email or phone number are three pieces of personal data that may pave the way for a future “downstream attack”, and that as a cybersecurity expert, his biggest fear for impacted customers is impersonation.

“The biggest thing that we’re worried about is impersonation … where they [hackers] can pretend to be you with other businesses that you might be registered with.”

Actually I think one saving grace is QF doesn’t have most people’s middle name, they usually only store the middle initial.

But the counter point to this is QF is not the first breach. All the spam calls I’m getting who know my name indicate my details have already been leaked many times.

 

[AuSammy]

They may well still be in the “we don’t know what we don’t know” stage.

No media interviews are going to provide any more answers than are already provided.
Such a beatup

Spot on

 

[SYD]

Actually I think one saving grace is QF doesn’t have most people’s middle name, they usually only store the middle initial.

I recently updated my profile because I was getting annoying messages that my profile was incorrect. Checked phone numbers, address and only when I contacted them about middle name did the error go away. Well, until it then came back…

But just the initial was an issue when filling out APIS. As soon as you try and put in your full middle name (as per your PP), it would scrub all other fields…

Anyway, guess I’ll wait and see what additional info is out there post Optus, Medibank and God knows what others…

 

[justinbrett]

Anyway, guess I’ll wait and see what additional info is out there post Optus, Medibank and God knows what others…

I’m 100% sure there were at least some dodgy businesses selling their Covid contact tracing logs

 

[Pushka]

Article strongly reinforces the point that several of us made earlier:

He told news.com.au the ‘date-of-birth’ being leaked was of greatest concern.

“The kind of information that has been stolen, you use it everywhere … they define you. I can change my credit card number, it’s annoying and it’s a hassle, but I can ring up my bank and it’s done.

“But my name and my date of birth, these are things that are a little bit more permanent and in many ways these are just as frustrating to have leaked because those are things you actually can’t change. I can’t change my name very easily and I certainly can’t change my date of birth.”

‘Worried about is impersonation’

Dr Pearce said that a hacker obtaining your full name, date-of-birth, email or phone number are three pieces of personal data that may pave the way for a future “downstream attack”, and that as a cybersecurity expert, his biggest fear for impacted customers is impersonation.

“The biggest thing that we’re worried about is impersonation … where they [hackers] can pretend to be you with other businesses that you might be registered with.”

And given this whole thing started with just a simple fake phone call to a telephone operator then

Still no communication from Qantas at all to our accounts. And the Qantas email address isn't whitelisted. Edit. It's on the safe list.

I recently updated my profile because I was getting annoying messages that my profile was incorrect. Checked phone numbers, address and only when I contacted them about middle name did the error go away. Well, until it then came back…

But just the initial was an issue when filling out APIS. As soon as you try and put in your full middle name (as per your PP), it would scrub all other fields…

Anyway, guess I’ll wait and see what additional info is out there post Optus, Medibank and God knows what others…

Same here. Called them and still cannot get rid of that message. There's nothing missing.

 

[Aeryn]

Still no communication from Qantas at all to our accounts. And the Qantas email address isn't whitelisted.

That might be your problem, domains/addresses on the whitelist are considered safe and delivered, domains on the blacklist are not; those on neither may or may not end up in SPAM.

 

[Pushka]

That might be your problem, domains/addresses on the whitelist are considered safe and delivered, domains on the blacklist are not; those on neither may or may not end up in SPAM.

Ok. It's the opposite then. It's safe. Otherwise we'd never get any emails for tickets etc. Which of course we do.

 

[Aeryn]

I’m 100% sure there were at least some dodgy businesses selling their Covid contact tracing logs

However given during Covid pretty much the only place you could go was the supermarket not sure that is going to be very valuable given the duopoly in most places.

Pretty sure the banks are already selling the data every time you use a card to pay for a coffee or takeaway.

 

[justinbrett]

However given during Covid pretty much the only place you could go was the supermarket not sure that is going to be very valuable given the duopoly in most places.

Pretty sure the banks are already selling the data every time you use a card to pay for a coffee or takeaway.

Not in my state; pubs, cafes, restaurants, I think even cinemas. Don’t think you needed it for Woolies.

Plenty of small independent operators who may have needed an extra few dollars.

 

[Aeryn]

My routine during Covid was different, certainly doesn't match my routine now. No one can steal my identity knowing i bought a coffee at xyz cafe in 2020 or went to the hairdressers.

And the check-in app was run by the government, businesses registered for a QR code and you scanned it and sent your contact details with venue code, i dont think the government was selling that data. If they did then there was no DOB just a name and contact number and email; the email i used was one of the one i use for online forums etc not one I use for important stuff.

 

[Hadun]

i believe this incident has only added one data point to the information already “out there” - QFF member number

Even more reason to just roll all affected members onto new ones then?

But the counter point to this is QF is not the first breach. All the spam calls I’m getting who know my name indicate my details have already been leaked many times.

Weirdly in my case the only thing that changed after those breaches was that I finally started getting spam in my inbox, though even those were never addressed to my real name or details until yesterday. Have not heard anything about fake IDs or credit accounts being set up yet.