AUSTRALIA | Qantas has issued an update on its cyber incident of last week, urging customers to stay vigilant of hackers.
Qantas has progressed its forensic analysis of the customer data in the system that was compromised.
There is no evidence that any personal data stolen from Qantas has been released but with the support of specialist cyber security experts, we continue to actively monitor.
Qantas has reconfirmed no credit card details, personal financial information or passport details were stored in this system and therefore have not been accessed.
There continues to be no impact to Qantas Frequent Flyer accounts. Passwords, PINs and login details were not accessed or compromised. The data that was compromised is not enough to gain access to these frequent flyer accounts.
After removing duplicate records, our investigation has found that there were 5.7 million unique customers’ data held in the system. Specific data fields vary from customer to customer.
“Our absolute focus since the incident has been to understand what data has been compromised for each of the 5.7 million impacted customers and to share this with them as soon as possible,” Vanessa Hudson, Chief Executive of Qantas Group.
“From today, we are reaching out to customers to notify them of the specific personal data fields that were held in the compromised system and offer advice on how they can access the necessary support services. Since the incident, we have put in place a number of additional cybersecurity measures to further protect our customers' data, and are continuing to review what happened.”
“We remain in constant contact with the National Cyber Security Coordinator, Australian Cyber Security Centre and the Australian Federal Police. I would like to thank the various agencies and the Federal Government for their continued support.”
Qantas suggested that all customers should remain alert, especially with email, text messages or telephone calls, particularly where the sender or caller purports to be from Qantas, and always independently verify the identity of the caller by contacting them on a number available through official channels.
More news here.
