Qantas offers more clarity on recent data breach
Australian airline Qantas has shared more details on the recent cybersecurity incident that affected the company.
Earlier this month, Qantas announced that it had suffered a cyber incident, which compromised the personal information of approximately 5.7 million customers.
The airline detected the breach on June 30th, 2025, when a hacker targeted its call center to gain access to a third-party customer servicing platform.
On Wednesday, Qantas published an update on the recent data breach.
According to the company’s statement, there is no evidence that any stolen personal data has been publicly released. Nevertheless, the airliner continues to monitor the situation.
Qantas reconfirms that no credit card details, personal financial information, or passport details were stored on the compromised system. Furthermore, no passwords, PINs, or login information were accessed, meaning there’s no impact on Qantas Frequent Flyer accounts.
The airline acknowledges that 5.7 million customers have been impacted by the incident. In four million cases, exposed customer records are limited to name, email address, and Qantas Frequent Flyer details. Of the remaining 1.7 million passengers, in addition to the data just mentioned, this also included address details, dates of birth, and telephone numbers.
Qantas is emailing affected customers to inform them of the types of personal data contained in the impacted system and provide advice and support.
“Our absolute focus since the incident has been to understand what data has been compromised for each of the 5.7 million impacted customers and to share this with them as soon as possible. Since the incident, we have put in place a number of additional cybersecurity measures to further protect our customers' data, and are continuing to review what happened,” Vanessa Hudson, CEO of Qantas Group, said in a statement.
She ensures all affected victims that Qantas will remain in constant contact with the National Cyber Security Coordinator, the Australian Cyber Security Centre, and the Australian Federal Police.
Lastly, the airline company recommends staying alert for any phishing or scamming attempts, and to use multi-factor authentication (MFA) for online accounts where available.
