Update on Qantas frequent flyers data hack
Qantas says it has been contacted by a group claiming to be behind the theft of the data of millions of its frequent flyers last week,
The airline said in a statement late on Monday that 'a potential cybercriminal has made contact' but it would not disclose if a ransom was being sought.
'As this is a criminal matter, we have engaged the Australian Federal Police and won't be commenting any further on the detail of the contact,' a Qantas spokesman said.
Qantas said it was working with cybersecurity experts 'to validate' the authenticity of the communication.
'There is no evidence that any personal data stolen from Qantas has been released but, with the support of specialist cybersecurity experts, we continue to actively monitor,' the airline said.
Chief executive Vanessa Hudson said on Friday Qantas was working with authorities to resolve the matter, Picture: NewsWire / Luis Enrique Ascui
The airline confirmed last Wednesday that a cyber attack occurred in one of its Filipino call centres, and customers' names, dates of birth, emails, and frequent flyer numbers were stolen.
Other personal information such as credit card, passport, and financial details were not stored in those centres, Qantas has said.
In an update released on Friday morning, Qantas said about six million customers had been impacted but that the airline's system 'remains secure'.
We have also increased resourcing in our contact centres to support our customers and have received more than 5000 inquiries through our dedicated customer support line established following the cyber incident.'
The airline issued an email to customers on Wednesday, in which Ms Hudson told those affected they did not need to change their passwords.
'I want to reassure our Qantas Frequent Flyers that there's no requirement to reset your password or pin,' she said.
'If you're having trouble accessing your account, reset your password or call the Qantas Frequent Flyer Service Centre.'
Affected customers can contact Qantas' support line on 1800 971 541 or +61 2 8028 0534.
In an update on Friday, the Australian Federal Police said Qantas had been 'highly engaged' with the authorities investigating the breach.
Originally published as Qantas says it has been contacted by a group claiming to have stolen data of its frequent flyers
Hashtags

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles

ABC News
2 hours ago
- ABC News
NSW audit finds gaps in state, local government cyber protections
A cybercrime expert has warned of a "worrying pattern" after government agencies were found to have implemented less than a third of basic cybersecurity protections in New South Wales. State government agencies only met 31 per cent of mandatory requirements to protect public data, according to a report released by the Audit Office of NSW last week. In total, 27 of these agencies reported 152 "significant, high, and extreme" cybersecurity threats in 2024. According to the report, 28 of the threats had remedies "that were either largely or completely ineffective". Additionally, 60 risks lacked specified timelines to reduce them to an acceptable level. Professor of cybercrime at the University of NSW Richard Buckland said the report's findings showed entities were increasingly at risk. He said that if effective, a cyber attack could "paralyse a section of society or the government". "This has been a pattern, a worrying pattern," he said. The report found a blind spot was the use of external contractors for some cybersecurity measures, for which the NSW government has no way of measuring if they were up-to-scratch. Professor Buckland said he understood the desire to outsource but warned it came with its own risks. "It's harder to monitor, to control, so external people helping you is a double-edged sword, especially if you don't have external capability to jump in when something goes wrong." It comes after Qantas reported a major cyber attack in which it said a "significant" portion of its six million customers' data was stolen and that a "potential cyber criminal" had made contact with the airline. In 2020, the personal information of more than 180,000 people was compromised by hackers who managed to access information held by Service NSW. Responding to the attack cost the state government more than $30 million, the audit office reported. Professor Buckland said the report pointed out the "same problem" every year and government agencies were "just not adequately defended". "They [the audit office] must be tearing their hair out wondering what they can do to bring about change." The report also found local councils were lagging in their defence against nefarious online actors, with only 69 per cent training staff in cyber awareness. It said one council suffered a ransomware attack that targeted local government records, employee financial data and systems responsible for monitoring water quality. Councils in NSW are not mandated to implement Cyber Security NSW's policies, but the agency recommends they adopt safeguards. "We've seen worldwide a big rise in targeted attacks against municipalities — the equivalent of councils in America — against libraries, schools, smaller and less well-funded data-rich organisations." Reacting to the report, Premier Chris Minns on Monday said the government had to find $90 million to 'plug gaps' in cybersecurity funding. 'It is a concern. I'm going to be honest, I would like to see us meet all the criteria immediately that the auditor-general identified,' he said. 'That's not possible though; most of the funding for cybersecurity in NSW had been cut or put on a funding cliff by the previous government.' He warned it will cost a lot more to make all government agencies safe. "Some of these organised crime gangs, usually located offshore, are pretty sophisticated, and we obviously have to be on our guard," the premier said.

Herald Sun
2 hours ago
- Herald Sun
Russian forces claim first foothold in new Ukraine region
Don't miss out on the headlines from Breaking News. Followed categories will be added to My News. Russia said Monday it captured its first village in Ukraine's central Dnipropetrovsk region after grinding towards the border for months, dealing a psychological blow to Kyiv as its worries mount. Moscow launched a fresh large-scale drone and missile barrage before the announcement, including on Ukraine's army recruitment centres, as part of an escalating series of attacks that come as ceasefire talks led by the United States stall. Kyiv also said it carried out a drone attack on a Russian ammunition factory in the Moscow region. Russia announced its forces captured the village of Dachne in the Dnipropetrovsk region, an important industrial mining territory that has also come under mounting Russian air attacks. Russian forces appear to have made crossing the border a key strategic objective over recent months, and deeper advances into the region could pose logistics and economic problems for Ukraine. Kyiv has so far denied any Russian foothold in Dnipropetrovsk. Moscow first said last month its forces had crossed the border, more than three years since launching its invasion and pushing through the neighbouring Donetsk region. Earlier Monday, Ukraine's army said its forces "repelled" attacks in Dnipropetrovsk, including "in the vicinity" of Dachne. Dnipropetrovsk is not one of the five Ukrainian regions -- Donetsk, Kherson, Lugansk, Zaporizhzhia and Crimea -- that Moscow has publicly claimed as Russian territory. Russia used the region's main city, Dnipro, as a testing ground for its "experimental" Oreshnik missile in late 2024, claiming to have struck an aeronautics production facility. - Sheltering in basements - Ukrainian military expert Oleksiy Kopytko told AFP the "situation is objectively difficult" for Ukraine's forces in Dnipropetrovsk and that Russia hopes to create some kind of buffer zone in the region. But he said: "Our troops are holding their ground quite steadily." An AFP reporter in the eastern city of Kharkiv saw civilians with their belongings being evacuated from a residential building damaged during Russia's overnight attacks, and others sheltering with pets in a basement. At least four people were killed and dozens wounded across Ukraine in the latest violence, mostly in the Kharkiv region bordering Russia and in a late-morning attack on the industrial city of Zaporizhzhia. Ukraine's police said a 34-year-old woman was killed in Kharkiv in attacks that wounded dozens in the northeastern city. In the southern city of Zaporizhzhia, regional governor Ivan Fedorov said 20 people needed medical assistance after Russian attacks. "Air defence remains the top priority for protecting lives," President Volodymyr Zelensky said on social media after the attacks, as fears mount over whether US President Donald Trump's government will continue supplying military aid to Ukraine. - 'Counting on partners' - Zelensky said Ukraine was "strongly counting on our partners to fully deliver on what we have agreed". Ukraine's air force said Moscow had launched 101 drones across the country and four missiles. Seventy-five of the drones were downed, it added. Attacks on Monday targeted two recruitment centres in separate cities, wounding four people, the Ukrainian army said, in what appears to be a new trend following similar strikes over the weekend and last week. "These strikes are part of a comprehensive enemy operation aimed at disrupting mobilisation in Ukraine," Ukraine's Centre for Strategic Communications, a government-funded body, wrote on social media. It added that Russia had attacked recruitment centres last week in the cities of Kremenchuk, Kryvyi Rig and Poltava. The Ukrainian army announced it hit the Krasnozavodsky Chemical Plant in the Moscow region with drones, saying the plant makes components for Russian drones used against Ukraine. In Russia, the defence ministry said it had shot down 91 Ukrainian drones overnight, including eight in the Moscow region, with the majority of the rest in regions bordering Ukraine. bur-mmp-oc/dt/jhb Originally published as Russian forces claim first foothold in new Ukraine region

Courier-Mail
8 hours ago
- Courier-Mail
Sean ‘Diddy' Combs received standing ovation from fellow inmates after partial conviction
Don't miss out on the headlines from Celebrity Life. Followed categories will be added to My News. Sean 'Diddy' Combs received a standing ovation from his fellow inmates when he returned to jail after he was acquitted of sex trafficking charges in his trial. Marc Agnifilo, the lead lawyer for the Act Bad rapper, told People that his client's fellow inmates at the Metropolitan Detention Center in Brooklyn, New York, viewed the partial acquittal as a sign of hope. Combs with ex-girlfriend Cassie Ventura, who testified against him during the trial. Picture:In this courtroom sketch, Combs reacts after he was convicted of prostitution-related offences but acquitted of sex trafficking and racketeering charges. Picture: Elizabeth Williams via AP 'They all said, 'We never get to see anyone who beats the government,'' Agnifilo said. The former Manhattan Assistant District Attorney went on to describe Combs' overall emotional and mental state, per Page Six. 'He's doing okay,' Agnifilo shared, adding that the Revolt co-founder, 55, 'realises he has flaws like everyone else that he never worked on.' Combs' mother, Janice, leaving court with other family members. Picture: Eduardo'He burns hot in all matters,' the lawyer continued. 'I think what he has come to see is that he has these flaws and there's no amount of fame and no amount of fortune that can erase them. You can't cover them up.' Last Wednesday, Combs finally learned his fate in his eight-week sex-trafficking trial after a jury reached a verdict. People react outside Manhattan Federal Court after the verdict was handed down. Picture: Eduardo/AFP The disgraced rapper was found not guilty on two counts of sex trafficking by force, fraud or coercion, and on racketeering conspiracy. However, he was convicted on two counts of prostitution, with each charge carrying a maximum of 10 years in prison. After the verdict was read, Combs' legal team urged Judge Arun Subramanian to release him on bail pending his sentencing. Subramanian denied the record producer's request because his attorneys failed to demonstrate that he posed 'no danger to any person.' Combs' sentencing hearing is set for October 3. This article originally appeared in Page Six and was reproduced with permission. Originally published as Sean 'Diddy' Combs received standing ovation from fellow inmates after partial conviction