QANTAS Cyber Incident

[prozac]

That would be IDCare, reminding you that there is nothing to be concerned about. Your points are safe; nothing to worry about.

It's not.

 

[Seat0B]

And now reported the data has been released onto the dark web. Who knows what will happen to those of us impacted next.

I agree. I had a lot of data taken, certainly enough to impersonate me, and I'm not happy about it. Until this, my personal data was not out on the dark web.

 

[LionKing]

Seems to me we are due for another "look over there!!" DSC offer, or loyalty gift, or bonus points ...




That would be IDCare, reminding you that there is nothing to be concerned about. Your points are safe; nothing to worry about.

I think it is not about whether my points are safe or my credit card details are safe, but rather I am more concerned about my identity being stolen and get impersonated to do something that I don't want or shouldn't do.

In particular what if someone is sending an email pretending my email address for some kind of scams?

 

[justinbrett]

 

[pauldab]

The salesforce data captured by the attackers in this breach also included Vietnam Airlines customers.

Have I Been Pwned: Vietnam Airlines Data Breach

In October 2025, data stolen from the Salesforce instances of multiple companies by a hacking group calling itself "Scattered LAPSUS$ Hunters" was publicly released. Among the affected organisations was Vietnam Airlines, which had 7.5M unique customer email addresses exposed following a breach...

haveibeenpwned.com

I received an alert from HateIBeenPwned on my VN account email address so I've also gone through and changed passwords there.

 

[prozac]

The salesforce data captured by the attackers in this breach also included Vietnam Airlines customers.

Have I Been Pwned: Vietnam Airlines Data Breach

In October 2025, data stolen from the Salesforce instances of multiple companies by a hacking group calling itself "Scattered LAPSUS$ Hunters" was publicly released. Among the affected organisations was Vietnam Airlines, which had 7.5M unique customer email addresses exposed following a breach...

haveibeenpwned.com

I received an alert from HateIBeenPwned on my VN account email address so I've also gone through and changed passwords there.

VN were also hacked 5-7 yrs ago. I'd be very cautious about what info you provide them.

 

[RooFlyer]

I think it is not about whether my points are safe or my credit card details are safe, but rather I am more concerned about my identity being stolen and get impersonated to do something that I don't want or shouldn't do.

Apologies - I should have made it clearer that I was being a bit facetious. We all know the issue is NOT about points etc but the wider issue; its just that Qantas and their IDCare simply focus on the QFF account, points etc and pretend everything is OK.

 

[Daver6]

Seems to me we are due for another "look over there!!" DSC offer, or loyalty gift, or bonus points ...

I think you mean a double serving of NP weeds

 

[Daver6]

I agree. I had a lot of data taken, certainly enough to impersonate me, and I'm not happy about it. Until this, my personal data was not out on the dark web.

How sure are you of that?

I think it is not about whether my points are safe or my credit card details are safe, but rather I am more concerned about my identity being stolen and get impersonated to do something that I don't want or shouldn't do.

In particular what if someone is sending an email pretending my email address for some kind of scams?

It's trivial to send an email pretending to be from your email address. So unless you've never sent an email and your address isn't known to anyone that risk has always been there.

 

[Seat0B]

How sure are you of that?

Well as sure as you can be. I’ve used a couple of products including Nord VPN to look. My email and some old passwords have been there but until now, not my DOB, which I keep pretty closely held.

 

[Pushka]

So my email address has been flagged with Vietnam airlines. On the haveibeenpwned website. But I don't think I had that email address 25 years ago so

 

[Brissy1]

Qantas says my details hacked, but the haveibeenpwned site report zero hacks on that email .

 

[Be.au]

Qantas says my details hacked, but the haveibeenpwned site report zero hacks on that email .

Yes, due to the injunction, you won't find the Qantas data loaded into things like HIBP

Court Injunctions are the Thoughts and Prayers of Data Breach Response

You see it all the time after a tragedy occurs somewhere, and people flock to offer their sympathies via the "thoughts and prayers" line. Sympathy is great, and we should all express that sentiment appropriately. The criticism, however, is that the line is often offered as a substitute for...

www.troyhunt.com

Where this leaves us with Qantas is that, on a personal note, as a law-abiding Australian who is aware of the injunction, I won't be able to view my data or that of my kids. I can always request it of Qantas, of course, but I won't be able to go and obtain it if and when it's spread all over the internet. The criminals will, of course, and that's a very uncomfortable feeling.

From an HIBP perspective, we obviously can't load that data. It's very likely that hundreds of thousands of our subscribers will be impacted, and we won't be able to let them know (which is part of the reason I've written this post - so I can direct them here when asked)

 

[moa999]

Not sure if an overseas hosted site like HIBP would be necessarily bound by an Aus injunction., and in any event they are making substantial alterations to the dataset.

 

[Be.au]

Not sure if an overseas hosted site like HIBP would be necessarily bound by an Aus injunction., and in any event they are making substantial alterations to the dataset.

https://twitter.com/x/status/1974231071119344072

Doesn't look like Troy wants to get sued.

https://twitter.com/x/status/1974242070492549572

https://twitter.com/x/status/1946147495521968129

 

[sudoer]

Not sure if an overseas hosted site like HIBP would be necessarily bound by an Aus injunction.

It's clearly owned and operated by an Australian entity, the geographic location of the hosting is irrelevant AFAIK.

 

[dairyfloss]

Hasn’t Qantas already told everyone they have been ‘pwned’, either directly, or via their account profile?