A Qantas A380 aircraft passes Gate 20 at The Beach, Mascot on the perimiter of Sydney Airport. Qantas.
Exclusive: Some Qantas customers have learned that more of their personal information was compromised in the airline’s significant cyberattack than initially reported.

Starting Wednesday, Qantas has been sending emails to around 5.7 million affected customers, outlining exactly what details were exposed due to a breach of their call centre system.

However, some customers have today received a second email from the airline, informing them more data had been stolen than first thought.

A Qantas A380 aircraft passes Gate 20 at The Beach, Mascot on the perimiter of Sydney Airport. Qantas.
Qantas has told some custers they had more data stolen in last week’s cyberattack than they were first told. (Wolter Peeters/SMH)

A spokesperson from Qantas revealed to 9news.com.au that, for most customers, the ongoing investigation uncovered that their phone numbers had also been accessed, in addition to the information they were alerted about earlier that week.

The precise number of people who received this follow-up email remains uncertain, but Qantas earlier disclosed that approximately 900,000 individuals and businesses had their phone numbers stolen in the breach.

“We are writing to provide you with an update following our previous email about the cyber incident on Monday, 30 June 2025,” the emails seen by 9news.com.au read.

“Our ongoing investigation has identified that your phone number details were accessed in addition to the data types we previously advised.

An excerpt of the email sent to some Qantas customers.
An excerpt of the email sent to some Qantas customers. (Nine)

“We recommend you remain vigilant for any unexpected contact by phone, in addition to the email and text message precautions we outlined in our previous communication.”

Qantas confirmed on Wednesday that email addresses, phone numbers, addresses, dates of birth, genders and even meal preferences in some cases had been stolen, as well as frequent flyer numbers, points balances, tiers and status credits.

However, it has stressed no login details, credit card numbers, payment details or passport numbers have been compromised.