Qantas App issues?

[RooFlyer]

I wonder if they can tell who could see whose information?

Also, I expect this will come into play:

Notifiable data breaches

If the Privacy Act covers your organisation or agency, you must notify affected persons & us if a data breach of personal information may result in serious harm

www.oaic.gov.au

I guess any 'serious harm' will only be known in the future.

Current investigations indicate that it was caused by a technology issue and may have been related to recent system changes.

Oh! A technology issue. I get those all the time, so no biggie then and not your fault.

 

[DejaBrew]

Oh! A technology issue. I get those all the time, so no biggie then and not your fault.

What’s a little bit of personally identifiable information between friends…?

 

[Cloud9]

They'll likely fall guy a couple of on the tools engineers and not bother their cough disciplining the executives who shot down any attempts to implement some proper engineering principles.

 

[SeatBackForward]

They'll likely fall guy a couple of on the tools engineers and not bother their cough disciplining the executives who shot down any attempts to implement some proper engineering principles.

While offering lavish bonuses to those executives who've moved back of office systems offshore where risk is managed by Service Level Agreements..

Been through an org that did exactly this.

"but what if we need someone to urgently resolve an issue?"
"but they have a 99.95 SLA in their contract so it's not an issue"

That CIO got huge praise, bonuses, then legged it onto their next gig where they did the exact same thing (with the same "team" around them).

Three years later that company had to cancel all those contracts, and bring it all back in house at tremendous expense.

 

[Cloud9]

While offering lavish bonuses to those executives who've moved back of office systems offshore where risk is managed by Service Level Agreements..

Been through an org that did exactly this.

"but what if we need someone to urgently resolve an issue?"
"but they have a 99.95 SLA in their contract so it's not an issue"

That CIO got huge praise, bonuses, then legged it onto their next gig where they did the exact same thing (with the same "team" around them).

Three years later that company had to cancel all those contracts, and bring it all back in house at tremendous expense.

Yep. Seen it happen a few times myself, over the years.
That's why I refuse to work for any company larger than 50 folk nowadays. The money might not be mind-blowing, but I get to do things properly.

 

[CaptainCurtis]

This is very concerning, especially if you had an international bookings, as I could view the APIS information of others including Passport Number and DOB.

Totally agree. Every time I refresh the app I am logged in as a different person, first Cassandra and now Jennifer. Both have international flights within the next 24 hours, and all personal information as you mention is accessible. I am also able to check-in on their behalf. What's interesting is that if I click 'card' in the top right, it comes up with my card, not Cassandra or Jennifers.

Scary indeed.

 

[Pushka]

Totally agree. Every time I refresh the app I am logged in as a different person, first Cassandra and now Jennifer. Both have international flights within the next 24 hours, and all personal information as you mention is accessible. I am also able to check-in on their behalf. What's interesting is that if I click 'card' in the top right, it comes up with my card, not Cassandra or Jennifers.

Scary indeed.

Is it still happening? the App says it's fixed.

 

[encryptededdy]

Bloody mobile and front end developers. When will they learn to actually write unit, integration and end to end tests to automagically check that their code won't blunder!?

How could this be an issue in the mobile app or frontend? If the Mobile App or Frontend can access another customer's data without authentication, it's already game over.

 

[Point Ventures]

Is it still happening? the App says it's fixed.

Still happening as of 1 minute ago. I am now Bianca P

 

[SeatBackForward]

Totally agree. Every time I refresh the app I am logged in as a different person, first Cassandra and now Jennifer. Both have international flights within the next 24 hours, and all personal information as you mention is accessible. I am also able to check-in on their behalf. What's interesting is that if I click 'card' in the top right, it comes up with my card, not Cassandra or Jennifers.

Scary indeed.

Do you have 2FA on your account? That is, if you login on a different device you get a code sent to mobile, or use an authenticator app?

 

[CaptainCurtis]

Is it still happening? the App says it's fixed.

Still happening for me.

Post automatically merged: May 1, 2024

Do you have 2FA on your account? That is, if you login on a different device you get a code sent to mobile, or use an authenticator app?

I do, yes.

 

[levelnine]

Still happening as of 1 minute ago. I am now Bianca P

Bianca saving up for a OWA. Just got there!

 

[CaptainCurtis]

What's interesting is that it appears to only be the 'Home' tab impacted. If I go to 'My QFF', the details are showing correctly as my own.

 

[Pushka]

Still happening for me.

Post automatically merged: May 1, 2024

I do, yes.

So even their 'panic over' message is wrong. Disappointing. And how many others are being impacted and simply don't know.

 

[Cloud9]

Just posted the link to this thread to the ABC. See if they bother to point out that Qantas are lying through their teeth.

 

[kpro]

Qantas must have decided that Bonza was stealing all the negative press this week and wanted to do something about it.

 

[smckay]

I’m now Alanna going BNE-CNS in a few weeks. More concerning is the loss of hundreds of thousands of points.

 

[CaptainCurtis]

So even their 'panic over' message is wrong. Disappointing. And how many others are being impacted and simply don't know.

Definitely an ongoing issue. I was just able to access someone’s boarding pass for a flight departing in a few hours.

 

[encryptededdy]

Has anyone had this issue on the Android app? Is it just the iOS app doing this?

 

[SeatBackForward]

Here I am sitting here with nothing changing on my app...

It would be interesting to understand why it's happening to some and not to others - that is, what's the commonality of those affected.

Post automatically merged: May 1, 2024

Has anyone had this issue on the Android app? Is it just the iOS app doing this?

Android here, with 2FA on my QF account and not seeing anything different for me.