Qantas Cyber Attack Exposes Data of 5.7 Million Customers
TL;DR
Data Breach Details
Qantas is facing significant scrutiny following the exposure of personal information of 5.7 million customers on the dark web. The breach is linked to a hack involving Salesforce, where approximately 1 billion records were stolen from various companies, including Qantas, Disney, and IKEA. The hacker group Scattered Lapsus$ Hunters executed the attack by posing as legitimate employees and contacting IT desks of the affected companies.
Image courtesy of Source
Home Affairs and Cyber Security Minister Tony Burke emphasized that Qantas would be held accountable for the breach, even though the data was released outside of Australia. Burke stated, “You can outsource parts of your business, but you don't outsource the law.” The compromised data includes customers' dates of birth, emails, and frequent flyer numbers.
Image courtesy of Source
Customer Notification and Impact
Qantas has confirmed it proactively notified customers about the types of personal data impacted. The airline has reassured customers that credit card details and passport numbers were not compromised during the breach. Qantas is working with the Australian Cyber Security Centre and the Australian Federal Police to address the situation and investigate further.
Image courtesy of Source
Qantas has established a dedicated customer support line to assist affected individuals. Customers are advised to remain vigilant against potential scams, especially those impersonating Qantas representatives. The airline also recommends using two-step authentication for personal accounts and staying informed about the latest cybersecurity threats.
Image courtesy of Source
Security Measures and Recommendations
In response to the breach, Qantas has implemented additional security measures, including enhanced monitoring and detection systems. The airline is also providing customers with access to specialist identity protection services. Qantas has previously issued a general warning to all Australians to be cautious of unexpected calls and messages.
Image courtesy of ABC News
Customers are advised to take specific precautions, such as independently verifying the identity of callers claiming to be from Qantas and avoiding sharing personal information. Qantas encourages customers to report any suspicious activity to Scamwatch.
Image courtesy of ABC News
The airline is also conducting a forensic analysis of the compromised data to understand the full scope of the breach. Qantas is sending emails to affected customers with detailed information about the exposed data and the steps they should take.
Image courtesy of ABC News
Ongoing Investigation and Customer Support
The Australian Federal Police are leading the investigation into the breach, and Qantas is cooperating fully with authorities. Qantas has also engaged independent cybersecurity experts to assess the situation. Customers can contact Qantas through their dedicated support line for assistance and to inquire about their personal data.
Image courtesy of ABC News
In summary, Qantas is actively managing the fallout from the data breach, focusing on customer safety and enhancing their security measures to prevent future incidents.