Qantas says 5.7 million customers data exposed in third-party breach

Qantas Airways said Sunday that personal information for about 5.7 million customers that was stolen in an early July cyberattack on a third-party customer service platform has been published online, prompting the airline to warn travellers to be vigilant and to seek support if they believe their data was affected.

Qantas said the majority of the exposed records contained names, email addresses and Frequent Flyer details. A smaller subset included business or home addresses, dates of birth, phone numbers, genders and meal preferences. The airline said credit card data, passport numbers, passwords and login credentials were not held in the compromised system. Qantas has notified impacted customers, established a specialist support line and made identity protection services available to those affected.

The company said it had obtained an injunction from the New South Wales Supreme Court prohibiting access to, use of, transmission of or publication of the stolen data. Qantas also said it had implemented additional security measures, increased staff training and strengthened system monitoring since the incident, and that it is cooperating with the Australian Cyber Security Centre...