Australian airline Qantas has confirmed that personal data belonging to 5.7 million customers has been leaked online, following a massive cyberattack on Salesforce, the U.S.-based software company used by major corporations worldwide. The breach also affected Disney, Google, Ikea, Toyota, McDonald’s, Air France, and KLM, according to AFP.
Qantas revealed that data from 5.7 million customers stolen in a June cyberattack has been leaked online.
Other companies, including Disney, Google, IKEA, Toyota, McDonald’s, Air France, and KLM, also had data stolen via a Salesforce breach and are now facing ransom demands.… pic.twitter.com/z80zHSOC3d
— BFM News (@NewsBFM) October 13, 2025
Qantas said the July breach targeted a third-party customer contact centre, granting hackers access to names, email addresses, phone numbers, dates of birth, and frequent flyer details. The airline clarified that no passport, credit card, or financial information was compromised. Despite obtaining a legal injunction from the Supreme Court of New South Wales to block access to the data, cybersecurity experts say such measures offer little real-world protection. “It’s frankly ridiculous… It doesn’t stop criminals at all,” said Troy Hunt, founder of Have I Been Pwned, to AFP.
The hackers, believed to be linked to the Scattered Lapsus$ Hunters group, reportedly demanded ransom by October 10. Analysts from Unit 42 said the attackers used “social engineering,” impersonating IT staff to trick employees into granting access.
The incident adds to Australia’s growing list of high-profile data breaches, highlighting global vulnerabilities in cloud-based customer management systems.
You May Like To Read: Gaza Deal Sparks Hope and Uncertainty Amid Trump’s “New Middle East” Plan
