Qantas: Breach affects 6 million people, “significant” amount of data likely taken

Qantas confirmed a breach of a third-party customer servicing platform exposing roughly 6 million customer records (names, emails, phones, birth dates, frequent flyer numbers). The incident is attributed to a likely social-engineering compromise of a call centre account; no financial or passport data were stored in the affected system. Qantas isolated the system, notified customers, and is working with the Australian Cyber Security Centre, AFP, and external experts. The report highlights supply-chain risk, provides customer remediation advice, and cites an FBI advisory linking similar airline-targeted attacks to the Scattered Spider group that use social engineering and extortion/ransomware tactics.