Qantas confirms customer data released following cyber attack

SYDNEY, Oct. 12 (Xinhua) -- The personal data of more than five million Qantas customers has been released following a cyber attack in June, the airline said on Sunday.

In a statement on Sunday, Qantas confirmed that it was one of a number of companies globally that has had stolen data released by a hacker group.

Qantas was one of 39 companies that were compromised by the group that targeted customers of software giant Salesforce between April 2024 and September 2025.

The responsible group had threatened to release stolen data unless a ransom was paid by Salesforce by a deadline on Saturday.

Qantas disclosed the data breach in early July, reporting that the customer records of 5.7 million customers had been compromised, including names, phone numbers, email addresses, birth dates and frequent flyer numbers.

The attack, which occurred on June 30, targeted a third-party system used by an offshore Qantas call center.

Qantas said on Sunday that it proactively advised all impacted customers of the types of their data that was compromised and that it has an ongoing injunction in place to prevent the stolen data from being accessed, viewed, released, used, transmitted or published by anyone, including third parties.

"We have also put in place additional security measures, increased training across our teams and strengthened system monitoring and detection since the incident occurred," it said.

It said it is continuing to work closely with the Australian government and law enforcement agencies. Enditem