QANTAS Cyber Incident

[prozac]

That would be IDCare, reminding you that there is nothing to be concerned about. Your points are safe; nothing to worry about.

It's not.

 

[Seat0B]

And now reported the data has been released onto the dark web. Who knows what will happen to those of us impacted next.

I agree. I had a lot of data taken, certainly enough to impersonate me, and I'm not happy about it. Until this, my personal data was not out on the dark web.

 

[LionKing]

Seems to me we are due for another "look over there!!" DSC offer, or loyalty gift, or bonus points ...




That would be IDCare, reminding you that there is nothing to be concerned about. Your points are safe; nothing to worry about.

I think it is not about whether my points are safe or my credit card details are safe, but rather I am more concerned about my identity being stolen and get impersonated to do something that I don't want or shouldn't do.

In particular what if someone is sending an email pretending my email address for some kind of scams?

 

[justinbrett]

 

[pauldab]

The salesforce data captured by the attackers in this breach also included Vietnam Airlines customers.

Have I Been Pwned: Vietnam Airlines Data Breach

In October 2025, data stolen from the Salesforce instances of multiple companies by a hacking group calling itself "Scattered LAPSUS$ Hunters" was publicly released. Among the affected organisations was Vietnam Airlines, which had 7.5M unique customer email addresses exposed following a breach...

haveibeenpwned.com

I received an alert from HateIBeenPwned on my VN account email address so I've also gone through and changed passwords there.

 

[prozac]

The salesforce data captured by the attackers in this breach also included Vietnam Airlines customers.

Have I Been Pwned: Vietnam Airlines Data Breach

In October 2025, data stolen from the Salesforce instances of multiple companies by a hacking group calling itself "Scattered LAPSUS$ Hunters" was publicly released. Among the affected organisations was Vietnam Airlines, which had 7.5M unique customer email addresses exposed following a breach...

haveibeenpwned.com

I received an alert from HateIBeenPwned on my VN account email address so I've also gone through and changed passwords there.

VN were also hacked 5-7 yrs ago. I'd be very cautious about what info you provide them.

 

[RooFlyer]

I think it is not about whether my points are safe or my credit card details are safe, but rather I am more concerned about my identity being stolen and get impersonated to do something that I don't want or shouldn't do.

Apologies - I should have made it clearer that I was being a bit facetious. We all know the issue is NOT about points etc but the wider issue; its just that Qantas and their IDCare simply focus on the QFF account, points etc and pretend everything is OK.

 

[Daver6]

Seems to me we are due for another "look over there!!" DSC offer, or loyalty gift, or bonus points ...

I think you mean a double serving of NP weeds

 

[Daver6]

I agree. I had a lot of data taken, certainly enough to impersonate me, and I'm not happy about it. Until this, my personal data was not out on the dark web.

How sure are you of that?

I think it is not about whether my points are safe or my credit card details are safe, but rather I am more concerned about my identity being stolen and get impersonated to do something that I don't want or shouldn't do.

In particular what if someone is sending an email pretending my email address for some kind of scams?

It's trivial to send an email pretending to be from your email address. So unless you've never sent an email and your address isn't known to anyone that risk has always been there.

 

[Seat0B]

How sure are you of that?

Well as sure as you can be. I’ve used a couple of products including Nord VPN to look. My email and some old passwords have been there but until now, not my DOB, which I keep pretty closely held.

 

[Pushka]

So my email address has been flagged with Vietnam airlines. On the haveibeenpwned website. But I don't think I had that email address 25 years ago so