Supply chain
β Supply Chain
Qantas Airways Limited Third-Party Breach (July 2025)
Primary Source βIncident Details
Qantas confirms data breach impacts 5.7 million customers. Australian airline Qantas has confirmed that 5.7 million people have been impacted by a recent data breach, in which threat actors stole customers’ data. On July 1st, Qantas disclosed that it had detected a cyberattack the previous day on a third-party platform used by a Qantas airline contact centre. While the company did not share any further details, BleepingComputer learned that the attack shared similarities with other attacks on the aviation industry linked to threat actors classified as Scattered Spider.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Third-party vendor
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2025-07-01 Breach occurred
- 2025-07-09 Publicly disclosed