I would imagine that when you attain Platinum Plus, your 12 month benefit period would start from the data of attainment (as it does for every other level)
Qantas hackers now the custodians of millions of useless flight credits
https://www.thebelltowertimes.com/qantas-hackers-now-the-custodians-of-millions-of-useless-flight-credits/
There is no guarantee that the social engineering part of the attack took place this week. Gaining access is sometimes followed by a bit of recon prior to the actual exfiltration....
While there is a good chance of that happening, I wouldn't expect it in a hurry. In the Medibank case there are still discussions over what is and isn't subject to legal privilege.
I also think that many don't understand just how relentless these attacks and attempts are. They may have repelled 1,000 or more attacks, but then one slips through...
Yes.
"An initial review has confirmed the data includes some customers’ names, email addresses, phone numbers, birth dates and frequent flyer numbers."
Enough in there to cause mischief.