Still yet to get 2nd email.. wonder what that means.
Maybe they've also given out my blood type, travel insurance health declarations, passport numbers and the like.
For most others, I think the biggest risk is a very convincing Qantas account phishing attempt using what is now stale...