Qantas, the Australian airline, has confirmed a cybersecurity incident affecting the personal data of six million customers. On Monday, the airline identified a cyberattack at one of its contact centers. The compromised data encompasses customer names, email addresses, phone numbers, birth dates, and frequent flyer numbers. However, credit card information, personal financial details, and passport information were not compromised, as these are not stored in the system, according to the press release.
The hackers may be associated with a group known as “Scattered Spider,” as reported by Bleeping Computer. While Qantas has not revealed the origin of the attack, this group has recently targeted the aviation and transportation industries. WestJet and Hawaiian Airlines have also faced data breaches in recent times.
The origins of these breaches have not been officially verified. However, cybersecurity firms have issued alerts that Scattered Spider, also referred to as Muddled Libra, has shifted its focus from insurance and retail to targeting airlines.
Mashable has contacted Qantas for comments regarding the breach and will provide updates on the story if the airline responds. In the aftermath of the breach, Qantas informed the Australian Cyber Security Center, the Office of the Australian Information Commissioner, and the Australian Federal Police, highlighting the criminal nature of the event.
Qantas has established a customer support hotline and a dedicated webpage with updates and vital information. Customers can reach the hotline for specialized identity protection guidance and resources at 1800 971 541 or +61 2 8028 0534. Customers are advised to keep an eye out for any unusual activity if they have recently traveled with Qantas.