The personal data of 5.7 million Qantas customers has been released on the dark web by hackers, after a ransom date came and went yesterday.
Qantas was among 40 other companies involved in a hack, which included major names like Toyota, Disney, and IKEA. This breach by the hacker group Scattered Lapsus$ Hunters resulted in the theft of nearly 1 billion customer records from the cloud technology company Salesforce in July.
This data breach also revealed personal information, including home addresses and phone numbers of various politicians, as Cyber Security Coordinator Lieutenant General Michelle McGuinness confirmed during Senate estimates earlier this week.
“A threat actor has claimed the theft of data… Qantas has informed all those affected, and it is possible the threat actor currently holds the data. Normally, the operational experts would work to verify this, and our operational organizations would address this inquiry,” she stated.
It is not believed credit card details or passport numbers were compromised in the breach.
Qantas has been contacted for comment.
“We are providing a 24/7 support line and expert identity protection guidance to affected customers. Additionally, an ongoing injunction from the NSW Supreme Court gives us legal measures to prevent the stolen data from being accessed or released.”
