Sydney: The Qantas data breach has triggered widespread concern after the airline detected unusual activity on June 30 within its third-party contact center platform.
The breach has potentially exposed the profiles of up to six million customers, including names, phone numbers, email addresses, birth dates, and frequent flyer numbers.
Qantas has said that it took immediate steps to contain the affected system as soon as the Qantas Data breach was discovered. An investigation is ongoing to determine how much information has been stolen, but the company expects the volume to be significant.
While reassuring the public, the airline stated that no passport details, credit card numbers, or personal financial data were stored in the compromised system. Frequent flyer passwords, PINs, and account balances also remain unaffected.
Qantas has contacted impacted customers and informed the Australian Federal Police, the Australian Cyber Security Centre, and the Office of the Australian Information Commissioner about the breach.
Qantas Group CEO, Vanessa Hudson stated that, “We sincerely apologise to our customers and we recognize the uncertainty this will cause.”

Qantas urged those with concerns to reach out to a dedicated support line for assistance and confirmed that the incident does not impact Qantas flight operations or safety standards.
This Qantas data breach follows a wave of recent cyber attacks targeting airlines worldwide. The FBI has warned that criminal groups like Scattered Spider are actively attacking the airline sector. Hawaiian Airlines and Canada’s WestJet have both suffered similar breaches in the past two weeks.
The incident is also part of a larger trend in Australia. In March 2025, the Office of the Australian Information Commissioner revealed that 2024 marked the worst year on record for data breaches in the country since official tracking began in 2018.
Australian Privacy Commissioner Carly Kind stated that, “The trends we are observing suggest the threat of data breaches, especially through the efforts of malicious actors, is unlikely to diminish.”
Kind emphasised that businesses and government agencies need to strengthen their security measures and improve data protection, pointing out that both private companies and public institutions are at risk of cyber attacks.
The Qantas data breach highlights the urgent need for stronger cyber defenses.

