QANTAS Cyber Incident

[Laptop Jockey]

Yes, see here.

Thankyou Eminere.

 

[Pushka]

Qantas says my details hacked, but the haveibeenpwned site report zero hacks on that email .

Same. Don't think the site is all that great. Given in the same incident Vietnam airlines is mentioned but not Qantas.

 

[MEL_Traveller]

Same. Don't think the site is all that great. Given in the same incident Vietnam airlines is mentioned but not Qantas.

As mentioned above, it’s because of the injunction. The site isnt allowed, legally, to publish that information.

 

[aikman]

I'm happy to accept 1,000SC added to my lifetime tally as compensation.

 

[Pushka]

As mentioned above, it’s because of the injunction. The site isnt allowed, legally, to publish that information.

Thanks. I didn't connect those dots. I think such action is shameful. Publishing actual personal data - of course. But 'banning' publication of information about whether that data has been used, is treating us with contempt.

 

[moa999]

It's clearly owned and operated by an Australian entity, the geographic location of the hosting is irrelevant AFAIK.

Ah. Never realised it was operated under an Australian ABN.

 

[MEL_Traveller]

Thanks. I didn't connect those dots. I think such action is shameful. Publishing actual personal data - of course. But 'banning' publication of information about whether that data has been used, is treating us with contempt.

What I suppose they’re trying to stop is someone accessing the data… from DV cases through to celebrities or other categories… and publishing that. One thing to be on the dark web, but most of us wouldn’t access that.

 

[Pushka]

What I suppose they’re trying to stop is someone accessing the data… from DV cases through to celebrities or other categories… and publishing that. One thing to be on the dark web, but most of us wouldn’t access that.

I was listening today to a cyber expert but he'd said he could see the Qantas data on the dark web.

Of course the court injunction is required to try prevent people publishing it. Which of course just got ignored. But to also ban websites that warn that there has been illegal access (but not actually publish that data) is only punishing us.

 

[mbe1510]

Has Qantas actually told its members that their data has now been published and to exercise caution, change x,y and z or would they prefer to hurry their heads in the sand and pretend everything is happy days?

 

[Pushka]

Has Qantas actually told its members that their data has now been published and to exercise caution, change x,y and z or would they prefer to hurry their heads in the sand and pretend everything is happy days?

Happy Days.

I checked last night in my account. No change from their previous statement. I've never received any email about any of this from Qantas. Not even the first generic one. I can only see they've taken everything from our accounts when I log in. We never select Meal Preference so that's the only one missing.

 

[RooFlyer]

is treating us with contempt.

Yeah. I also thought the court injunction was to prevent reproduction of stolen data in the public sphere. Not to prevent an alert website from - you know- alerting people now and into the future.

Has Qantas actually told its members that their data has now been published and to exercise caution, change x,y and z or would they prefer to hurry their heads in the sand and pretend everything is happy days?

Sure. As I noted above, one time when I contacted IDCare and being incredulous that they’re saying no there’s nothing to worry about. I challenged them: “so it’s a case of don’t worry, be happy?“

Response was, ‘yes’.

 

[SYD]

Has Qantas actually told its members that their data has now been published and to exercise caution, change x,y and z or would they prefer to hurry their heads in the sand and pretend everything is happy days?

Yes, sort of.

https://www.qantas.com/au/en/support/information-for-customers-on-cyber-incident.html

 

[VPS]

Has anyone actually registered for the class action

 

[Hampton Mike]

First possible attempt at fraud. I’ve just received an invoice emailed to me for $3650 from Coastal Contracting in Frankford Delaware. And I guess that’s US dollars too

They must think we’re stupid that we’d just pay an invoice …. “Oh yeah, I must have got them to do something on my house in Delaware - I’d better pay the invoice”!!!

 

[Be.au]

Yeah. I also thought the court injunction was to prevent reproduction of stolen data in the public sphere. Not to prevent an alert website from - you know- alerting people now and into the future.

It's more than "reproduction", it is

publishing, transmitting, disclosing or using any of the material which has been taken from Qantas’ servers without Qantas’ consent, and requesting the defendants to remove immediately all such material from any accessible location on the internet.

Qantas Airways Limited v Persons Unknown - NSW Caselaw

www.caselaw.nsw.gov.au

 

[RooFlyer]

It's more than "reproduction", it is

Qantas Airways Limited v Persons Unknown - NSW Caselaw

www.caselaw.nsw.gov.au

I would’ve thought ‘reproduction’ covers that, but thanks for the clarification.

 

[Brissy1]

It's more than "reproduction", it is

Qantas Airways Limited v Persons Unknown - NSW Caselaw

www.caselaw.nsw.gov.au

So Qantas can, if they wish, consent to emails (only) being "used" to inform blah blah. Qantas could even be proactive () in allowing reputable sites and thereby assisting their affected customers.

 

[muppet]

Hmmm, yes that is interesting as QF has now effectively blocked people from knowing via their usual sources that their details have now appeared on the dark web. I think the court should revisit that decision as it seems to primarily benefit QF - hackers/scammers/crooks don’t give two hoots about a court ruling.

 

[I love to travel]

Has anyone actually registered for the class action

Yes - request ack with a statement that they will recontact in the future. Release of the data is the next step in the chain of events that will allow class action to proceed