QANTAS Cyber Incident

[Flyerwin]

My personal information has been leaked again and again in literally all the past major hacks, so much so that I’m at this stage numb to it all.

 

[VPS]

To clarify I successfully received Equifax protect from Qantas in September as per ongoing communication with them.
“We would also like to offer you a 12-month subscription to Equifax Protect, a comprehensive credit and identity monitoring service. This is at no cost to you.

The service includes the following:
• Credit report monitoring and alerts, including alerts for key changes on your credit report and access to monthly Equifax credit reports
• Dark web monitoring and alerts, including ‘Identity Protection’ powered by Norton™ *
• Identify theft insurance (up to $15,000 annual cover) ^

Please note, this is a unique, one-time code and should not be shared with anyone else, as it has been issued in response to your specific circumstances. Your unique code will expire after six months. ”

Also interested in how you achieved this.

I think I'll send them an email and complain and ask about Equifax and see what they say

 

[flyingfan]

Apparently the data has been leaked onto the dark web

Hackers leak Qantas data containing 5 million customer records after ransom deadline passes

Hacker collective Scattered Lapsus$ Hunters demanded payment in return for preventing the stolen data of nearly 40 companies from being shared

www.theguardian.com

 

[moa999]

My personal information has been leaked again and again in literally all the past major hacks, so much so that I’m at this stage numb to it all.

And not much point in Qantas paying anything given it seems to be less information than got leaked last time, albeit possibly all not overlapping.

 

[Le_Champion]

This airline is a national embarrassment

 

[henrus]

My personal information has been leaked again and again in literally all the past major hacks, so much so that I’m at this stage numb to it all.

Hackers now you know my QFF number please transfer me some extra Qantas points. Thanks.

 

[LionKing]

Apparently the data has been leaked onto the dark web

Hackers leak Qantas data containing 5 million customer records after ransom deadline passes

Hacker collective Scattered Lapsus$ Hunters demanded payment in return for preventing the stolen data of nearly 40 companies from being shared

www.theguardian.com

I would brace for scam calls and emails... Think I have already received one this morning. Thankfully my email provider has dodged that...

 

[MEL_Traveller]

I would brace for scam calls and emails... Think I have already received one this morning. Thankfully my email provider has dodged that...

Where are you located? The data was apparently released at 3pm aussie eastern time. Does that correspond with your time zone?,

 

[TheInsider]

This is concerning headline. There’s more data to be leaked?

View attachment 474868

https://www.news.com.au/finance/business/travel/hackers-threaten-to-release-1-billion-customer-records-by-3pm-aest/news-story/101996e8044e1e6ba459c6a17bff4b18

Nothing has been leaked until the hackers released the data today, along with all those other companies that used salesforce

 

[sudoer]

along with all those other companies that used salesforce

No, the group only released the data of 6 of the 40 odd companies involved.

 

[Flyerwin]

What a world we live in.

 

[bPeteb]

And now reported the data has been released onto the dark web. Who knows what will happen to those of us impacted next.

 

[JustSlash]

No, the group only released the data of 6 of the 40 odd companies involved.

So does that mean the other 34 actually paid? Guess that mystery will stay unsolved forever...

 

[cove]

Mrscove wants us to update our passwords now but with 2 factor ID I am not certain that this is needed.

 

[SYD]

Mrscove wants us to update our passwords now but with 2 factor ID I am not certain that this is needed.

Yeah, QF still uses a four digit PIN, not a password. As far as we know, PIN haven’t been compromised but some contact details have. If you want to do anything, switch to an Authenticator app for 2FA (you can still use mobile if you need to ie no data access).

TBH, hacking FF accounts for fraudulent but traceable use of points is possibly less likely than using your details elsewhere eg banking / CCs etc.

 

[Berlin]

Yes, so of course it is US now again that have to deal with updated passwords and annoying 8 factor double and triple verifications. How about companies not offshoring their call centre to untrained agents somewhere in the Philippines instead? Makes me

 

[justinbrett]

Yes, so of course it is US now again that have to deal with updated passwords and annoying 8 factor double and triple verifications. How about companies not offshoring their call centre to untrained agents somewhere in the Philippines instead? Makes me

If you ever get hacked and 2FA saves you, I think your opinion might change.

My gmail was hacked recently and they attempted to access a number of accounts, including Facebook, Apple, Netflix, Hilton and a couple more.

They didn’t succeed for the ones that had 2FA, and that is what alerted me to the problem. I’d much rather have this protection than wish and hope a company doesn’t get hacked.

 

[prozac]

I've had 2 calls shown as "Unknown Number", one yesterday afternoon and one this morning. I never usually get these. Not happy that soon my clean email will be out there for all to see.

 

[Daver6]

Yes, so of course it is US now again that have to deal with updated passwords and annoying 8 factor double and triple verifications. How about companies not offshoring their call centre to untrained agents somewhere in the Philippines instead? Makes me

Yes, because no Australian has ever been caught in a phishing attack.

 

[RooFlyer]

Seems to me we are due for another "look over there!!" DSC offer, or loyalty gift, or bonus points ...

I've had 2 calls shown as "Unknown Number", one yesterday afternoon and one this morning.

That would be IDCare, reminding you that there is nothing to be concerned about. Your points are safe; nothing to worry about.