pauldab
Member
- Joined
- Jan 12, 2021
- Posts
- 105
- Qantas
- Gold
- Virgin
- Platinum
- Oneworld
- Sapphire
- SkyTeam
- Elite Plus
Overnight I received an email from haveibeenpwned.com noting the email address I use for my VN Lotus Miles account was in the dataset from the Salesforce breach which hit Qantas.
This is a direct result of the dataset being released to the public, HIBP actively scrapes for public releases of info and if it's credible they add it to their database then alert their registered users.
You can safely put your email address into their search to see if it's been included in any breach. There is no need to hand over a password or other info.
And I can assure everyone, the Have I Been Pwned website is safe and is created/owned/operated by an Australian security researcher Troy Hunt.
They only provide searching for email addresses and never expose any information from the breach. Only that the email you enter was present.
More information on this specific incident is at Have I Been Pwned: Vietnam Airlines Data Breach
EDIT:
Dataset includes Name, DOB, Email Address, Phone Number & Loyalty Membership Number
You won't know what exactly was taken as we had from the Qantas breach but just assume all 5 data points were revealed.
I can confirm this is related to VN and not QF by mistake as I use unique email addresses for each company I deal with as an additional factor of authentication and this breach was on my VN email address.

This is a direct result of the dataset being released to the public, HIBP actively scrapes for public releases of info and if it's credible they add it to their database then alert their registered users.
You can safely put your email address into their search to see if it's been included in any breach. There is no need to hand over a password or other info.
And I can assure everyone, the Have I Been Pwned website is safe and is created/owned/operated by an Australian security researcher Troy Hunt.
They only provide searching for email addresses and never expose any information from the breach. Only that the email you enter was present.
More information on this specific incident is at Have I Been Pwned: Vietnam Airlines Data Breach
EDIT:
Dataset includes Name, DOB, Email Address, Phone Number & Loyalty Membership Number
You won't know what exactly was taken as we had from the Qantas breach but just assume all 5 data points were revealed.
I can confirm this is related to VN and not QF by mistake as I use unique email addresses for each company I deal with as an additional factor of authentication and this breach was on my VN email address.

Last edited: