Link to main version

235

Qantas refuses to pay ransom to hackers. They published the data of 5.7 million people

Among them are the personal information of several prominent Australian politicians and public figures

Снимка: ЕРА/БГНЕС

Personal data of customers of Australia's largest airline Qantas, stolen by hackers in the summer of 2025, has been published on the darknet. According to the television channel 9News, cybercriminals have cited the company's refusal to pay the ransom as the reason for publishing the information.

The published data of Qantas customers includes first and last names, dates of birth, email addresses and frequent flyer card numbers. The list also includes personal information of several prominent Australian politicians and public figures, including their home addresses and phone numbers. However, the airline claims that the criminals did not have access to credit card information or passport numbers. “We are investigating the data that was published with the help of cybersecurity experts and are taking additional security measures“, the airline said, noting that it is cooperating with government agencies and the country's federal police.

It was previously reported that on June 30, cybercriminals gained access to the personal data of Qantas customers by hacking the databases of one of the company's call centers. The airline said that hackers were unable to steal passwords, PINs or login details for its frequent flyer app, but admitted that “a significant amount of personal information was stolen“.

In March this year, cybercriminals hacked the databases of the Department of Justice in the Australian state of New South Wales, gaining access to more than 9,000 files containing personal data, the texts of convictions and court decisions, as well as statements given by confidential witnesses. In April, Australia's largest superannuation funds, AustralianSuper, RestSuper and Insignia Financial, which collectively manage assets worth more than $480 billion, were hacked, resulting in the theft of personal data from at least 600 people.