Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Eva888

2762 posts

Uber Geek
+1 received by user: 2427

Lifetime subscriber

#320076 3-Jul-2025 10:27
Send private message

 

 

Read about this a couple days ago but today received official email from Qantas apologising and saying nothing can be done and changing password not necessary. I never keep credit cards on apps but this is a concern and a huge loss of trust. They do make it hard enough to log in with timing out the page and requiring sms authentication so wondering what the outcome will be with future bookings and the effects of this.

 

 
 
I'm writing to inform you that we believe your personal information was accessed during the cyber incident we recently experienced. I want to personally apologise that this has happened and explain what we know and how we're supporting you.
 
What happened
A cyber criminal targeted one of our airline call centres and gained access to a customer servicing platform. On Monday, we detected unusual activity on a third-party platform used by a Qantas airline contact centre.  We then took immediate steps and contained the system. We can confirm all Qantas systems remain secure.
 
Information that was accessed
Our initial investigations show the compromised data may include names, email addresses, phone numbers, birth dates and Frequent Flyer numbers.
 
Importantly, your credit card details, financial information, passport details, and Frequent Flyer passwords were not accessed. Your Qantas Points and account remain secure.
 
What we're doing for you
Regular updates will be available on our dedicated webpage. We've also established a dedicated support line for affected customers on 1800 971 541 or +61 2 8028 0534, with access to specialist identity protection advice and resources through this team. 
 
What you should do
We recommend:

 

  • Remaining alert for unusual communications claiming to be from Qantas
  • Being cautious of emails or calls asking for personal information or passwords

Remember, Qantas will never contact you requesting passwords, booking reference details or sensitive login information.
 
I want to reassure our Qantas Frequent Flyers that there's no requirement to reset your password or pin. If you're having trouble accessing your account, reset your password or call the Qantas Frequent Flyer Service Centre on 13 11 31 or +61 2 9433 2329.
 
Your travel
If you have upcoming travel, you can check your flight details through the Qantas App or website as normal.
 
Our commitment
We're taking this incident extremely seriously and working with government agencies and independent cyber security experts. We're implementing additional security measures to strengthen system monitoring and protection of your information as part of our response. If we identify new important information as we continue to investigate and respond to this incident, we will share it with our customers.
 
Again, we are deeply sorry this occurred and our focus is on doing all we can to support you.

 

 


Create new topic
KiwiSurfer
1722 posts

Uber Geek
+1 received by user: 993

ID Verified
Lifetime subscriber

  #3389403 3-Jul-2025 11:00
Send private message

From my reading of this it seems to be a secondary system outside of Qantas that has been hacked so not everyone who has booked a Qantas flight etc will be affected. From memory it seems to be a external platform their call centre uses that was affected. I flew on QF this year and have been a member of their programme for many years -- yet I'm not affected by the breach. Makes sense as I haven't called them in recent years so wouldn't be any record in the breached system.

 

Have no issues with their SMS auth and timeouts etc -- Air NZ also has 2FA and aggressive timeouts. Seems to be a normal thing for airlines these days. This Qantas incident underlines why it is so important to have tight security.




darylblake
1172 posts

Uber Geek
+1 received by user: 410

Trusted

  #3389479 3-Jul-2025 16:53
Send private message

This is exactly why you should use different passwords on each website. Soo many people dont.

 

Unfortunately to make it work properly its worthwhile investing in a password manager.

The pain comes when you are away from a desktop and need to login on your phone and need to reference the actual password.

 


Ah well.. 

 

 


Handle9
11925 posts

Uber Geek
+1 received by user: 9675

Trusted
Lifetime subscriber

  #3389480 3-Jul-2025 16:55
Send private message

darylblake:

 

This is exactly why you should use different passwords on each website. Soo many people dont.

 

Unfortunately to make it work properly its worthwhile investing in a password manager.

The pain comes when you are away from a desktop and need to login on your phone and need to reference the actual password.

 


Ah well.. 

 

 

 

 

Why would accessing a password on a phone be difficult? Any modern password manager works across platforms. 




insane
3324 posts

Uber Geek
+1 received by user: 1006

ID Verified
Trusted
2degrees
Subscriber

  #3389496 3-Jul-2025 17:24
Send private message

I think he's referring to Average Joe who just saves passwords and enabled passkeys blindly as they are prompted to do so without having a plan. 

 

 

 

He covered PW managers in his middle paragraph.

 

 

 

Back to the main topic though, didn't this happen a few years ago and people needed to get new passports issued?


Eva888

2762 posts

Uber Geek
+1 received by user: 2427

Lifetime subscriber

  #3389529 3-Jul-2025 21:59
Send private message

The email states there is no need to change passwords or pins. 


Batman
Mad Scientist
30014 posts

Uber Geek
+1 received by user: 6217

Trusted
Lifetime subscriber

  #3389643 4-Jul-2025 11:41
Send private message

darylblake:

 

This is exactly why you should use different passwords on each website. Soo many people dont.

 

Unfortunately to make it work properly its worthwhile investing in a password manager.

The pain comes when you are away from a desktop and need to login on your phone and need to reference the actual password.

 


Ah well.. 

 

 

 

 

 

 

What password manager do you recommend? I rank security first, ease of use also high up there though. Are there dodgy password managers and how do i identify them? 

 

 

 

Can I move my passwords from Google into these managers? 


 
 
 
 

Shop now for Dell laptops and other devices (affiliate link).
freitasm
BDFL - Memuneh
80652 posts

Uber Geek
+1 received by user: 41045

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #3389646 4-Jul-2025 12:07
Send private message

It's all good having password manager options on mobile and desktop devices. Byt trying non-tech savvy users to actually use those is a mission. 

 

I have lost count of how many times some have changed passwords because they couldn't access their online services, when BitWarden was readily available for them. At that point obviously the passwords were no longer in sync.

 

It's a people problem, not technology problem. 





Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


richms
29099 posts

Uber Geek
+1 received by user: 10210

Trusted
Lifetime subscriber

  #3389649 4-Jul-2025 12:20
Send private message

I work with people that will make their passwords the name of the site and their phone number and a ! if it insists on symbols.





Richard rich.ms

Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.