Qantas Airways (ASX:QAN) is warning customers after a cyber attack exposed data held by a third-party customer service platform.
The breach, detected on 30 June, affected details of around six million people, including names, contact details, birth dates and frequent flyer numbers.
The airline said it quickly contained the system and has ruled out any compromise of passport numbers, credit card data, or account passwords.
However, it expects the amount of stolen data to be “significant”. The breach has been reported to Australia’s cyber authorities and federal police.
It follows a warning from the FBI about increased threats to the airline sector, linked to a hacking group known as Scattered Spider.
The incident adds to a growing list of major Australian data breaches this year, prompting calls for stronger digital security across public and private sectors. Qantas operations and flight safety remain unaffected.