Qantas Says Cyberattack Accessed Millions of Flyers’ Data

Qantas Airways Ltd. expects that a “significant” amount of customer data was stolen by a cyberattack targeting one of its contact centers.

Australia’s biggest airline is investigating how criminals gained access to a third-party platform used by the call center that held the service records of some six million customers, it said in a statement Wednesday.

Qantas joins a growing list of airlines suffering hacking breaches in recent weeks, including Alaska Air Group Inc.’s Hawaiian Airlines and Canada’s WestJet Airlines Ltd.

The latest incident comes days after the U.S. Federal Bureau of Investigation warned that notorious cyber crime group Scattered Spider was targeting airlines using techniques impersonating employees or contractors to hack into IT systems.

Qantas said its initial review confirmed the stolen data included some customers’ names, email addresses, phone numbers, birth dates and frequent flyer numbers. Credit card details, personal financial information and passport details aren’t held in the system.

The system is now contained, with no impact to the airline’s operations or safety, according to its statement. All Qantas systems remain secure, the carrier said.

Shares of Sydney-traded Qantas fell as much as 4.1% on Wednesday.

“We are continuing to investigate the proportion of the data that has been stolen,” Qantas said. “While we conduct the investigation, we are putting additional security measures in place to further restrict access and strengthen system monitoring and detection.”

Qantas has notified the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and the federal police.

Top photo: The Qantas Airways Ltd. aircraft. Photographer Brent Lewin/Bloomberg Photographer: Brent Lewin/Bloomberg.

Copyright 2025 Bloomberg.