Qantas begins telling some customers that mystery attackers have their home address

Qantas reported a breach of a third-party contact-center platform that exposed personal data for about 5.7 million customers (names and emails for ~4M; additional PII such as addresses, dates of birth, phone numbers, and frequent-flyer details for up to ~1M). The airline says systems are contained, affected customers will be notified and shown the data types exposed, and it is monitoring for any public release of the data; attribution and any involvement of ransomware/extortion are not yet confirmed.