Skip to content
Qantas Cyberattack Exposes Data of 6 Million Customers via Third-Party Breach

Qantas Cyberattack Exposes Data of 6 Million Customers via Third-Party Breach

First seen 2 Nov 2026, 05:12 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 2, 2026 at 06:16 UTC
  • •Qantas's data breach affects nearly 6 million customers.
  • •The attack was facilitated by social engineering targeting call center staff.
  • •No compensation will be provided to affected customers.

A cyberattack on Qantas has compromised the data of nearly 6 million customers, with the breach traced back to a third-party call center in Manila operated by Concentrix. The attackers used social engineering tactics, tricking a call center employee into granting access to Qantas's systems. The breach involved the Frequent Flyer iFly database, which is managed through a CRM platform provided by Salesforce. Qantas has not confirmed the specifics of the attack but has indicated that it last assessed the security of the Manila center in 2019. Customers have been advised on how to protect their digital identities, but no compensation for stolen data has been offered. The incident raises concerns about the security practices of third-party vendors handling sensitive customer information.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-11-02
Qantas reveals data breach details
Qantas disclosed that a cyberattack compromised data of nearly 6 million customers, linked to a third-party call center.
afr.com
Recent
Investigation into breach reveals attack method
Investigators found that social engineering tactics were used to gain access to Qantas's systems through a call center employee.
im.com.au

More articles in this cluster (2)

Following this threat?

Track Qantas in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (11)

1 / 3

Common questions

How many customers are affected?
Nearly 6 million customers have had their data compromised in the Qantas cyberattack.
What was the attack method?
The attackers used social engineering to trick a call center employee into granting access to Qantas's systems.
Is there any compensation for affected customers?
No, Qantas has stated that there will be no compensation for the stolen data.