Australian airline Qantas has suffered a significant cybersecurity breach, potentially compromising the personal details of up to six million customers. The breach occurred when hackers targeted a third-party call center platform used by the airline. Although the full extent of the data loss is still under investigation, it is confirmed that customer names, email addresses, phone numbers, birth dates, and frequent flyer numbers were accessed. However, credit card details and passport information remain secure. The breach was detected on Monday after unusual activity was noticed in one of the airline’s customer contact centers. Following the discovery, Qantas contained the system but has not disclosed how long the data was vulnerable. The airline is now conducting an urgent investigation and implementing additional security measures. Qantas CEO Vanessa Hudson apologized to customers and assured them of the company’s commitment to protecting their personal information. The incident follows warnings from cybersecurity experts about the aviation industry being targeted by hacker groups like Scattered Spider, known for using social engineering tactics. Recently, other airlines, including Delta Air Lines, Hawaiian Airlines, and Canada’s Westjet, have also experienced cyberattacks. The Australian Information Commissioner is awaiting Qantas’ assessment to determine if the breach must be legally reported.

