Australia's Qantas says cyber hacker accessed millions of customer accounts
The hacker targeted a call centre and gained access to a third-party customer service platform containing six million names, e-mail addresses, phone numbers, birth dates and frequent flyer numbers, Qantas said in a statement on Wednesday.
The airline did not specify the location of the call centre or customers whose information was compromised. It said it learned of the breach after detecting unusual activity on the platform and acted immediately to contain it.
'We are continuing to investigate the proportion of the data that has been stolen, though we expect it will be significant,' Qantas said, reporting no impact on operations or safety.
WestJet probes cybersecurity incident affecting mobile app, some internal systems
Last week, the U.S. Federal Bureau of Investigation said cybercrime group Scattered Spider was targeting airlines and that Hawaiian Airlines and Canada's WestJet had already reported breaches. Qantas did not name any group.
'What makes this trend particularly alarming is its scale and co-ordination, with fresh reports that Qantas is the latest victim' of a hack, said Mark Thomas, Australia director of security services for cybersecurity firm Arctic Wolf.
Scattered Spider hackers are known to impersonate a company's tech staff to gain employee passwords and 'it is plausible they are executing a similar playbook,' Thomas said.
Qantas' share price was down 3.3% by mid-session trade against a flat overall market.
The breach is Australia's most high-profile since those of telecommunications network operator Optus and health insurance leader Medibank in 2022 prompted cyber resilience laws including mandatory reporting of compliance and incidents.
It brings unwelcome attention to Qantas which is trying to win public trust after actions during and after the COVID-19 pandemic saw it plunge on airline and brand league tables.
Qantas was found to have illegally sacked thousands of ground workers during the 2020 border closure while collecting government stimulus payments. It also admitted selling thousands of tickets for already-canceled flights.
The airline drew the ire of opposition politicians who said it lobbied the federal government in 2022 to refuse a request from Qatar Airways to sell more flights. Qantas denied pressuring the government which eventually refused the request – a move the consumer regulator said hurt price competition.
Qantas CEO Vanessa Hudson has improved the airline's public standing since taking office in 2023, reputation measures showed.
'We recognize the uncertainty this will cause,' Hudson said of the data breach. 'Our customers trust us with their personal information and we take that responsibility seriously.'
Qantas said it notified the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and the Australian Federal Police.
ACSC declined to comment and AFP said only that it was aware of the incident. The OAIC was not immediately available for comment.
The airline said the hacker did not access frequent flyer accounts or customer passwords, PIN numbers or log in details
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Globe and Mail
6 hours ago
- Globe and Mail
Adventure Out Loud Features New High-Impact Safari Travel Options Across Africa
Brisbane, Australia - July 2, 2025 - Australian social enterprise Adventure Out Loud announced a renewed focus on high-impact safari & adventure travel experiences throughout Eastern and Southern Africa. This initiative reflects the company's mission to integrate transformative travel with social good, as 50% of its profits continue to support education and conservation initiatives across the continent. Founded in 2015, Adventure Out Loud offers tailor-made and small group trips that combine luxury adventure with charitable engagement. These curated Africa vacations span iconic Big Five safaris, mountain treks, and cultural immersions, while also enabling travelers to connect directly with local communities and charities. This unique blend of exploration and impact positions the company as the leader among safari travel agencies serving international clients, especially those seeking meaningful ways to travel. 'Travel can be a force for good,' said Nathan Taiaroa, founder of Adventure Out Loud. 'Our travelers see the real Africa, not just through game drives and landscapes, but through the eyes of the people they meet and the projects they support.' Adventure Out Loud's approach to impact travel has already achieved substantial outcomes. Since inception, the company's travel-driven contributions have funded over 880,000 hours of education, supported 136 students through high school and tertiary education, and raised more than $600,000 for nonprofit partners. The company currently collaborates with eight charities across Africa, and each trip includes opportunities for travelers to witness the results of their contributions firsthand. Adventure Out Loud designs private and group itineraries throughout Kenya, Tanzania, Uganda, South Africa, Botswana, and East and Southern African destinations. The itineraries accommodate different travel interests, incorporating various activities but not limited to guided wildlife safaris, gorilla trekking, mountain expeditions, golf-focused travel, and cultural experiences. The expanded scope aims to meet increasing demand for personalized travel across the region. With the announcement, Adventure Out Loud reinforces its position within the impact travel movement, a growing sector among ethical and luxury travel providers. The company's transparency in reporting social contributions and its dedication to sustainable tourism further distinguishes it from other safari tour operators. Adventure Out Loud's team of Africa travel specialists continue to prioritize personalized service, working closely with clients to craft bespoke journeys. These experiences not only offer personal rejuvenation and adventure but also align with global calls for more responsible tourism practices. To learn more or plan a journey that blends exploration with purpose, visit: About Adventure Out Loud Adventure Out Loud is a Brisbane-based travel social enterprise that curates high-end, tailor-made African travel experiences with a focus on charitable impact. With 50% of profits directed toward education and conservation initiatives, the company's model empowers travelers to make a difference while exploring Africa's most iconic destinations. Media Contact Company Name: Adventure Out Loud Contact Person: Nathan Taiaroa Email: Send Email Phone: +61 432 822 652 Country: Australia Website:
CBC
6 hours ago
- CBC
Jan. 6 rioter pardoned by Trump gets life in prison for plot on FBI
An American military veteran was sentenced Wednesday to life in prison for plotting to attack an FBI office and assassinate law enforcement officers in retaliation for his arrest on charges that he was part of the mob that stormed the Capitol on Jan. 6, 2021, court records show. Edward Kelley was one of the first rioters to breach the Capitol. Nearly two years later, he made plans with another man to attack the FBI office in Knoxville, Tenn., using improvised explosive devices attached to vehicles and drones, according to prosecutors. Last November, a jury convicted Kelley of conspiring to murder federal employees, solicitation to commit a crime of violence and influencing federal officials by threat. Kelley, 36, received a pardon from U.S. President Donald Trump for his Jan. 6 convictions, but a judge agreed with prosecutors that Trump's action did not extend to Kelley's Tennessee case. That makes Kelley, who is from Maryvale, Tenn., one of only a few Capitol riot defendants remaining in prison after Trump's sweeping act of clemency. U.S. District Judge Thomas Varlan handed down Kelley's life sentence during a hearing in Knoxville, according to court records. The judge denied a request for Kelley to be released pending the outcome of an appeal. Prosecutors had recommended a life sentence for Kelley, saying he was remorseless and incapable of rehabilitation. "On the contrary, Kelley not only believes the actions for which he was convicted were justified but that his duty as a self-styled 'patriot' compelled him to target East Tennessee law enforcement for assassination," they wrote. Kelley served in the Marine Corps for eight years. He was deployed to Iraq and Afghanistan before his 2015 discharge from the military. On Jan. 6, 2021, Kelley was captured on video helping two other rioters throw a Capitol Police officer onto the ground and using a piece of wood to damage a window, according to the FBI. He was the fourth person to enter the Capitol through a broken window, the FBI said. After a trial without a jury, a federal judge in Washington convicted Kelley last November of 11 counts stemming from the riot. Before Kelley could be sentenced, Trump pardoned him and hundreds of other convicted Capitol rioters. Kelley argued that his pardon was broad enough to cover his conduct in the Tennessee case, but the judge disagreed. Varlan said Kelley's crimes in the Tennessee case were separated from Kelley's conduct on Jan. 6 "by years and miles." Prosecutors reached the same conclusion. In other Jan. 6 cases, however, Trump's Justice Department has argued that the pardons apply to separate convictions. For instance, prosecutors concluded that a Kentucky man's pardon for storming the Capitol also covered his conviction for illegally possessing guns when FBI agents searched his home for the Jan. 6 investigation. Kelley has been jailed since December 2022. His lawyer, Mark Brown, said Kelley did not hurt anybody or directly threaten anybody with violence. Brown urged the judge to reject prosecutors' request to apply a "terrorism enhancement" in calculating his client's sentence. Pardoned Jan. 6 rioters released from prison 5 months ago Duration 2:14 Less than 24 hours after being pardoned by U.S. President Donald Trump, some of the convicted Jan. 6 rioters were released from prison. On his first day in office, Trump pardoned roughly 1,600 offenders and commuted the sentences of more than a dozen people. "Kelley does not deserve the same sentence as an actual 'terrorist' who injured or killed hundreds or thousands of America citizens," Brown wrote. Kelley's co-defendant, Austin Carter, pleaded guilty to a conspiracy charge in January 2024. He is scheduled to be sentenced on Aug. 4. Kelley created a list of 36 law enforcement officers to target for assassination and shared it with Carter, calling it their first "mission," according to prosecutors. All the officers were involved in Kelley's May 2022 arrest on Capitol riot charges and the FBI's search of his home. "The proof at trial established that Kelley targeted law enforcement because of their anticipated role in the civil war that Kelley hoped to initiate and because of his animus towards those who participated in his May 2022 arrest and search of his home," prosecutors wrote.
CTV News
7 hours ago
- CTV News
Saskatchewan man sentenced after sharing child sexual abuse material with FBI agent
A Saskatchewan man is facing nearly four years in a U.S. federal prison for distributing child sexual abuse material to an undercover FBI agent, according to the Washington D.C. district attorney's office. Thirty-two-year-old Matthew Norman Ballek was sentenced on June 30 to 46 months in prison, followed by a six-year term of supervised release after pleading guilty in October to possession of child pornography, the D.C. attorney's office said in a news release. Prosecutors say Ballek started communicating with an undercover member of the FBI's child exploitation task force on an online dating app in January 2024. The application, which was not named in the release, is sometimes used by those with a sexual interest in children, according to the release. 'Ballek contacted the undercover agent and, believing he was communicating with a pedophile, expressed an interest in child pornography,' the release said. 'Ballek sent the undercover agent three video files via an encrypted messaging application. Those video files depicted adult men raping a toddler and prepubescent boys.' He was arrested on Feb. 7, 2024 in D.C. Ballek may soon be subject to deportation proceedings, the U.S. attorney's office says.
