Qantas penalizes executives for July cyberattack

Qantas disclosed a July cyberattack that exposed personal data for about 5.7 million customers (names, emails, frequent flyer numbers, and for many, addresses, DOBs, phone numbers and other attributes). No credit card or passport details were leaked; the company is conducting a forensic investigation, has implemented additional protections, and reduced senior executives' short-term bonuses by 15% in response. Reporting links the incident to cybercriminal groups associated with Scattered Spider and ShinyHunters and indicates attackers exploited platforms connected to Salesforce, while Qantas warns of increased social engineering threats.