The airline originally detected unusual activity on a third-party call centre platform on 30 June 2025 and moved to contain the breach. Qantas had previously stated that while customer data was stolen, there was no evidence the data had been publicly released — until now.
According to cybersecurity analysts, hackers linked to a group known as Scattered Lapsus$ Hunters have published the stolen data, reportedly involving around 5.7 million Qantas customers. The leaked records are believed to include names, email addresses, frequent flyer numbers, and in many cases, phone numbers, postal addresses, and dates of birth.
Qantas maintains that no credit card data, identity documents, financial information, or passport details were held in the compromised system, and therefore were not accessed. The airline also said that login credentials, passwords, and PINs were not obtained in the breach.
To limit further misuse of the data, Qantas earlier obtained an injunction from the New South Wales Supreme Court to prevent publication, sharing, or exploitation of the stolen records.
In response to the leak, Qantas says it is working with top cybersecurity experts and cooperating with law enforcement, including the Australian Federal Police and the Australian Cyber Security Centre. The airline is providing ongoing support to affected customers via a 24/7 helpline and identity protection resources, while urging vigilance against phishing, scam calls, and other fraudulent approaches.
The confirmation of a dark web release raises serious concerns about how widely the data might already be circulating, and the opportunities it gives bad actors for identity theft or socially engineered fraud. Even partial personal data — such as names, dates of birth, and frequent flyer numbers — can lend credibility to phishing campaigns.
As the investigation continues, key questions remain: whether additional, undisclosed data was accessed, the identity of the attackers and their motives, and the extent to which Qantas will face regulatory or class-action repercussions.
