On Sunday, 12 October 2025, Qantas confirmed that personal data from more than five million customers had been leaked on the dark web. The data breach followed a ransom threat from a hacker group called Scattered LAPSUS$ Hunters after Salesforce, a cloud software provider linked to Qantas, refused to pay. The attack targeted customer data stored in Salesforce systems used by Qantas between June and July 2025.
Australia's government and cybersecurity experts have since urged Qantas customers to stay alert for scams. Authorities warned that identity theft, phishing, and fraud attempts could surge in the coming weeks. Qantas has already launched a 24-hour hotline and identity protection services for affected users.
