QANTAS CONFIRMS MAJOR DATA BREACH LINKED TO THIRD-PARTY VENDOR

Summary from the TLDR InfoSec newsletter

Qantas confirmed a data breach on July 1 after attackers accessed a third-party call center platform, potentially exposing records of up to 6 million customers, including names, email addresses, phone numbers, dates of birth, and frequent flyer numbers. The attack is linked to the hacking group Scattered Spider, which has targeted airlines like Hawaiian Airlines and WestJet using social engineering to trick staff into system access. While no financial data, passwords, or passports were compromised, the incident underscores airline vulnerability during peak travel and the rising threat of supply chain attacks on aviation.