Qantas says passenger data from July cyber breach posted online, investigation underway

Qantas Airways said data stolen during a cyber incident in July has been released online by cybercriminals. The airline confirmed it is working with cybersecurity experts and Australian authorities to assess the extent of the breach and identify what information has been made public.

The airline said the breach originated from a third-party platform and affected about 5.7 million customer records. Most of the exposed data included names, email addresses, and frequent-flyer details. A smaller set of records also contained addresses, dates of birth, phone numbers, gender, and meal preferences. Qantas said no credit card, passport, or financial details were impacted, and that frequent-flyer accounts remain secure.

Qantas said it obtained an injunction through the New South Wales Supreme Court to stop the stolen data from being accessed, viewed, or published. The airline said it has also implemented stronger security controls, expanded staff training, and enhanced system monitoring since the breach occurred.

“We have an ongoing injunction in place to prevent the stolen data being accessed, viewed, released, used, transmitted or published by anyone, including third parties,” the airline said in a statement.

Qantas said it had informed all affected customers in July about the types of data involved and that this information remains unchanged. The airline is providing 24/7 support and identity protection services for those affected.

The carrier said it continues to work with the Australian Cyber Security Centre and the Australian Federal Police as investigations progress.