QANTAS Cyber Incident

[mrsterryn]

I do keep an eye on my credit rating however it has been a long time since needing to apply for credit
Obviously as I have had the full exposure range through the Qantas breech is there any negative ramifications from putting on a credit ban which I plan to do today ?

 

[serfty]

I coped 10 categories:

 

[AltusRay]

A random, off topic post apropos nothing…

In media and communications circles, Friday is known as “take out the trash day”.

It’s the day PR operatives typically release bad news.

It’s done in the hope of slipping under the radar.

By Friday people are tired and just want to get to the weekend. Journos included. Sometimes fewer will cover the bad news.

And even if they do, News consumption on Friday arvo/evening is generally lower than other times during the week. Maybe fewer people will see it.

Additionally, the news cycle and audience interest typically shifts to sport on Friday evening, especially in the football season.

Crisis management 101.

There is no B-3 bomber.

 

[flyingfan]

Yet another for almost the full bingo card, save for meal preference (I’ve never put one down)

 

[flyingsal]

Partner and teen - 2 days ago - only had:

• Name
• Qantas Frequent Flyer number
• Tier

Tween - still nothing.

Me, an hour ago:

• Address
• Name
• Email address
• Qantas Frequent Flyer number
• Tier
• Date of birth
• Phone number
• Gender

I've had credit blocks in place for 2 years because of previous data breaches.

Currently thinking about setting up many new emails for different purposes. And making a list of the more important things like banks, super, phone etc to update first.

 

[Rangalad]

I coped 10 categories:

View attachment 456964

10/10 for me too.

Qantas customers furious after massive cyber data breach

Qantas customers say they feel vulnerable, angry and unsupported following last week's major cyber security breach — and are now questioning whether the airline is doing enough to protect Australians' personal data.

www.abc.net.au

It took Qantas CEO Vanessa Hudson until Thursday night to give an interview following the cyber attack. She spoke to one media outlet from her holiday in Europe. Other media, including the ABC, were not given advance warning of the interview so were unable to put questions to the airline's boss.

 

[BrianQQ]

She spoke to one media outlet from her holiday in Europe

Miss gurlie. Time to come back from your holiday and STEP IN AS LEADER.

 

[blackcat20]

I got 8 out of ten, just missing SC and points balance which are probably the least worrying.

 

[RooFlyer]

Visit IDCARE! How about Qantas ensure proper security over private information.

I did contact IDcare early on. It’s overseas of course. They literally said “there’s nothing to worry about“. when I said "oh it’s a case of don’t worry be happy"? They said yes.

Partner and teen - 2 days ago - only had:

• Name
• Qantas Frequent Flyer number
• Tier

Tween - still nothing.

Me, an hour ago:

• Address
• Name
• Email address
• Qantas Frequent Flyer number
• Tier
• Date of birth
• Phone number
• Gender

Which again reinforces what I said earlier. They contacted the Low impacts first so the conversation goes oh that’s not as bad as we thought.

where is a class action ambulance-chaser when you need one?

Post automatically merged: Yesterday at 12:02 PM

Miss gurlie. Time to come back from your holiday and STEP IN AS LEADER.

She did come back a few days after the issue broke. Apparently delayed a bit because she had to be in contact all the time at first and of course Qantas doesn’t have Int’l Wi-Fi.

 

[Himeno]

Personally most unhappy about Address as often the combination of Date of Birth, Full Name and Address is used as validation when calling a range of services. 2 of these are not changeable and the 3rd one is very hard to change.

2 of those 3 are changeable. I have done so for both of them. The 3rd isn't (but I ignore it anyway).

 

[Aeryn]

The website FAQ was updated on Wednesday to say this ability is supposed to be coming by the end of the week (today?)

It says types - we already know the type is address, what I want to know is specific values leaked.

I dont trust QF to provide this at all at them moment, because they said we would know the types of data leaked on Wed yet only sent it this morning Friday for the worst affected.

Absolute BS they notified the least affected first trying to delay the backlash from those who have much bigger reason to be angry and still offering no help with credit monitoring and no compensation.

We need to know the specific values leaked for changeable items so we can decide what we need to change.

 

[33kft]

She spoke to one media outlet from her holiday in Europe.

"I don't configure a WAF mate"

 

[zsw]

2 of those 3 are changeable. I have done so for both of them. The 3rd isn't (but I ignore it anyway).

Sorry, can I ask how I could possibly change my Date of Birth or Full Name? Address is the only one that can change but I'm obviously not going to move for the sake of it.

 

[Himeno]

Sorry, can I ask how I could possibly change my Date of Birth or Full Name? Address is the only one that can change but I'm obviously not going to move for the sake of it.

You can change your name by submitting the required form to your state gov births, deaths and marriages registry.

I did it myself when Red Roo was still active here.

 

[Aeryn]

Technically you can change your name by deed poll but why should you have to go to that expense and all the trouble it causes? As you then have to change a bunch of other things like passport, drivers license, mortgage titles and constantly have to show proof of name change for qualifications etc. Ridiculous to suggest this is simple for most - and Qantas sure as heck ont pay for this. Plus unless you hate your name (or are hiding) you wont want to change, fewer women than ever even change their surname when marrying.

If you mean change the name you use for Qantas bookings, that is only possible if you never travel internationally with them as name on ticket has to match passport.

You can change your mailing address pretty easily, but residential address not so much unless your loaded, as selling and buying is expensive and time consuming. Renter may find it simpler but not easy in this market. And again if you like where you live why should you have to move.

DOB well no that cant be changed.

So not really helpful or sensible suggestions for most.

 

[Peregrine]

If you change your name, don't you then have to change house title deeds, investments, property, superannuation.
If ithis is at all feasable, which i seriously doubt, why shouldn't Qantas own this mess? There're the ones who sort to increase profits by outsourcing.

 

[AltusRay]

You can change your name by submitting the required form to your state gov births, deaths and marriages registry.

I did it myself when Red Roo was still active here.

It's Friday, it's been a week. I can normally spot internet humor but I might be a bit off today.

Can you confirm this is a joke?

 

[DejaBrew]

They contacted the Low impacts first so the conversation goes oh that’s not as bad as we thought.

Once again, want to be clear I'm not trying to defend Qantas here. Apart from anything else, I'm still awaiting the 3rd email which suggests I've hit the jackpot (no meal preference on file though, so I already know that I won't be yelling out "BINGO!"), but....

Another school of thought on this is that it would likely be faster to identify customers with minimal data loss (e.g. if they had minimal info on file in the system of record, then you're going to know quick smart that they only had a small subset of fields leaked). Conversely, it will likely take longer to determine the (full) extent of the leak for customers with more data points on file. If this is in any way close to the reality of Qantas' / CyberCX's investigations, then it stands to reason that Qantas would - and should - communicate out to those minimally impacted customers as soon as practically possible in order to assuage their concerns. No need to leave them waiting on tenterhooks whilst they keep digging into the worst case scenario breaches for other customers.

I honestly don't see any way in which Qantas comes out of this comms exercise with glowing reviews from all customers? It's basically a case of one group of FF members arguing "...I'm more heavily impacted so you should have communicated to me earlier instead of pushing a "nothing to see here" agenda with those who had nothing overly meaningful leaked" vs another group of FF members who would be arguing "...why did you keep me waiting and worrying for so long before telling me I was on the lower end of the impact scale?"

Communicate to all at once and (some) customers will have issues. Communicate to subsets of customers at different points in time and/or differing orders of severity and (some) customers will vehemently disagree with the approach. The way I see it, I don't think there's much they could have done* that would not have been viewed with cynicism, frustration, anger et. al.

* other than avoid a data breach in the first instance

 

[Flyfrequently]

Very sad/angry about this.

Has anyone called and asked what address, email address and phone number was in the data? We've moved in the last six months and I use a couple of email addresses and phone numbers

Address
Name
Email address
Qantas Frequent Flyer Number
Tier
Points Balance
Status Credits
Date of Birth
Phone number

I called the number @bPeteb - 18 minutes of my life I won't get back.

Guy in SA answers with his first name and surname, clearly reading from a script, can hear a fellow in the background saying exactly the same.

Asked what precise data - "don't have that information"
Asked what he could see on HIS screen about us - "nothing"
Asked how did he know we were calling from Australia - "oh by your phone number on the screen"!
Asked if he could raise a ticket with our concerns - "you can email Qantas Customer Care"
Asked what number can we call if issues with upcoming trips - "13 11 31 and check the App"

He also proactively advised that "no one can access your Frequent flyer account" - ah, someone just has just managed to get 8 very personal unique pieces of information on Mr Flyfrequently.....

And I am still waiting for my "drip feed Friday" email to see if I trump his 8.

 

[offshore171]

You can change your name by submitting the required form to your state gov births, deaths and marriages registry.

I did it myself when Red Roo was still active here.

A bizarre suggestion in response to a data breach.

Helpful for those in the witness protection program though!