Tech support scam caused massive data breach at Australian airline Qantas
The Commissioner’s report goes deeper, explaining a crook who claimed to represent “Qantas IT help” made the call and told a contact center agent to access a CRM system and perform certain actions needed to close a support ticket. REG AD googletag.cmd.push(function() { googletag.display('labrador/thereg/article/desktop/b'); }); Those actions instead connected the CRM to a data extraction tool which the crooks used to siphon off customer records. Qantas also conducted mandatory and recurring training on how to handle PII.
- ▪The Commissioner’s report goes deeper, explaining a crook who claimed to represent “Qantas IT help” made the call and told a contact center agent to access a CRM system and perform certain actions needed to close a support ticket.
- ▪REG AD googletag.cmd.push(function() { googletag.display('labrador/thereg/article/desktop/b'); }); Those actions instead connected the CRM to a data extraction tool which the crooks used to siphon off customer records.
- ▪Qantas also conducted mandatory and recurring training on how to handle PII.
Opening excerpt (first ~120 words) tap to expand
(function() { let windowUrl = window.location.href; windowUrl = windowUrl.substring(windowUrl.indexOf('?') + 1); let messageElement = document.querySelector('.shareableMessage'); if (windowUrl && windowUrl.includes('code') && windowUrl.includes('expires')) { messageElement.style.display = 'block'; } })(); cyber-crime Tech support scam caused massive data breach at Australian airline Qantas It’s possible to leak PII describing 5.7 million people without breaching privacy rules Simon Sharwood Simon Sharwood APAC Editor Published thu 16 Jul 2026 // 07:27 UTC Australia’s Privacy Commissioner has revealed a tech support scam was the cause of the massive 2025 data breach at Australian airline Qantas and found the carrier didn’t breach its privacy obligations despite leaking personally…
Excerpt limited to ~120 words for fair-use compliance. The full article is at theregister.