Qantas cyberattack affects 6M customers

Six million people are said to have been affected by a cyberattack on the popular Australian airline, Qantas. Yet, the airline claims that the “cyber incident” hasn’t impacted its operations.

Qantas, Australia’s most popular airline, said it was affected by a cyber incident that affected customers’ data.

The airline is now contacting customers to explain that a third-party platform used by Qantas’ contact center was breached. It says that the cyberattack didn’t impact the airline's operations, but customers’ data was affected.

Six million Qantas customers are said to have been affected by the breach, according to DW.

The data includes:

• Names
• Email addresses
• Phone numbers
• Dates of birth
• Frequent flyer numbers

While this might not seem like the most sensitive data, threat actors could use this information to craft sophisticated phishing scams that urge flyers to hand over their credentials.

Qantas explicitly said that the system does not store credit card details, personal financial information, or passport details.

“No Frequent Flyer accounts were compromised, nor have passwords, PIN numbers, or login details been accessed,” the airline said in a statement.

The airline detected the breach on June 30th, 2025, when, in Qantas’ words, a “cyber criminal targeted a call centre to gain access to a third-party customer servicing platform.”

The airline has said it's working with the Federal Government’s National Cyber Security Coordinator, along with other relevant authorities.