QANTAS Cyber Incident

[QFFHntrGthr]

I got this "Here is your tax invoice" email too (once), as a P1. What the heck? The FF and QC links look legitimate apart from the fact they're not https. The PDF preview (I didn't open the PDF) has my name, address and FF #.

If this is a legitimate email, why on earth would they think links to the FF and QC T&Cs would be helpful in any way?
If not, looks like the exploitation has started for me

I rang the QFF service centre (dreaded Manila) this morning. Yes the email is legitimate. They sent it last night but there's no payment taken she assured me to which I responded that I know since I have not provided any card details and records for past payments Qantas says is not kept. I asked her to explain why they would send out an email with a tax invoice for something nobody has ordered and where no payment is due. No coherent answer.
She didn't even know why they issued a new P1 card (of course we all know in this community thanks to @Princess Fiona ) when I didn't order one. So much for internal training & communication.

 

[Larko1]

Are you P1 @Larko1 ? Spoke to the call centre. They 've had several calls all from P1s re this email. They think it might be related to the blue changeover but have to confirm with QFF team in the morning. Now I can stop fretting and have an overdue shut eye.

Yes.

 

[flyingfan]

I rang the QFF service centre (dreaded Manila) this morning. Yes the email is legitimate.

Thanks for reporting back. Happy it's not a hack, but irritated at QF for this amateurish confusion. I feel like replying and quoting links to their own privacy policies and the OAIC back at them.

I can't wait for my blue card to arrive. /sarcasm

 

[MEL_Traveller]

I rang the QFF service centre (dreaded Manila) this morning. Yes the email is legitimate. They sent it last night but there's no payment taken she assured me to which I responded that I know since I have not provided any card details and records for past payments Qantas says is not kept. I asked her to explain why they would send out an email with a tax invoice for something nobody has ordered and where no payment is due. No coherent answer.
She didn't even know why they issued a new P1 card (of course we all know in this community thanks to @Princess Fiona ) when I didn't order one. So much for internal training & communication.

my guess… it seems they are ordering the new cards for those eligible, and did this through the regular order system. Instead of suppressing any customer email and payment, they somehow got sent out. The supplier/card printer probably takes details off the internal order system.

 

[Comoman]

Just read that Optus is being taken to court re: their 2022 data breach by the Australian Information Commissioner.

I wonder if Qantas will be next?

 

[oz_mark]

Just read that Optus is being taken to court re: their 2022 data breach by the Australian Information Commissioner.

I wonder if Qantas will be next?

For reference: Australian Information Commissioner takes civil penalty action against Optus