Qantas data breach
Was I affected?
Qantas confirmed a breach affecting about 5.7 million people, exposing names, email addresses, phone numbers and addresses. You are in scope if you are a Qantas customer or Frequent Flyer member and received Qantas' email about the July 2025 cyber incident.
| Announced | Jul 2, 2025 |
|---|---|
| When it happened | June 30, 2025 |
| People affected | 5.7 million |
| Data exposed | Names, Email addresses, Phone numbers, Addresses, Dates of birth and Other details |
| Through a vendor | Third-party contact centre customer platform |
| Status | Confirmed by the company or a regulator filing |
What happened
Qantas said criminals got into a third-party customer service platform used by one of its contact centres on June 30, 2025. After removing duplicates it put the count at 5.7 million customers: about 4 million records held name, email and Frequent Flyer details, and the rest also had addresses, birth dates, phone numbers, gender or meal preferences. No passwords, PINs, passports or payment data were taken; the data was later leaked online.
What should I do?
- Treat emails, texts and calls that mention Qantas, Frequent Flyer points or flight changes as suspect; don't click links or share codes, and contact the company through its official app or website.
- Never share your Frequent Flyer PIN or one-time codes; Qantas will not ask for them by phone.
- Contact IDCARE (idcare.org, 1800 595 160) for free help, and ask Equifax, Experian and illion for a credit ban if you suspect misuse.
Check the other services you use →
Sources
- Nearly six million Qantas records held in hacked system, airline says · SBS News (news)
- Qantas data breach could affect 6 million customers · Help Net Security (news)