Confidential customer details exposed on Qantas site

[markis10]

OLC - New Feature - check strangers in!

Interesting little glitch and some issues trying to get urgent attention to the issue!

Qantas’ online booking site today breached the privacy at least two of its customers, with their personal details revealed to another party when they attempted to access flight check-in......

ARN - Confidential customer details exposed on Qantas site

 

[Flashback]

ARN - Confidential customer details exposed on Qantas site

Qantas’ online booking site today breached the privacy at least two of its customers, with their personal details revealed to another party when they attempted to access flight check-in information online.

 

[Mal]

Not the first time Qantas has allowed privacy to be breached. I'm aware of two other issues that they've fixed in the past which also allowed confidential information to be passed to third parties.

 

[JohnK]

An issue that can be avoided by having thorough QA testing on any changes to software. I would hope that the people involved have been given a stern warning at least.

I wonder if Qantas has contacted the people whos details were exposed?

 

[Mal]

I wonder if Qantas has contacted the people whos details were exposed?

Going back to one of my earlier examples (this happened a while ago)

People like:

Mrs Hx Mx who flew BNE-SIN-FRA return?
Ms Mx Gx (QFF 2xx_xx_) who flew ADL-SYD one way?

One of the examples I referred to happened in 2005 when the Qantas email/itinerary system got totally stuffed and Qantas was emailing random itineraries to other people.

Using the details in those emails, you could get complete access to their bookings. While Qantas did correct the issue and send out apology emails to those who received incorrect itineraries, this didn't resolve the core issue of them stuffing up. I do wonder just how many incorrect itineraries were sent around the place...

 

[jayr]

I've had two odd privacy issues occur with Qantas.

Once myself and friends were travelling together and one had booked all the tickets, though he did not have my FF number at the time.

I logged into MY BOOKINGS and enytered name and flight details, to make sure I collected the points, then had access to the names, FF details and I think phone numbers of the other parties. Just because they were travelling with me surely QANTAS shouldn't reveal all that detail.

On a different occasion , Qantas bumped me across to a Pacific Blue BNE_WELL flight with a few other passengers but gave me a sheet witht heir details on it.