Qantas Airways confirms that some of customers were affected by a misconfiguration in its app, which exposed sensitive information and boarding passes to random users.
See also: Kenya Airways: Its data was leaked on the dark web
Qantas is Australia and the largest airline by fleet size, operating 125 aircraft and serving 104 destinations. Qantas Airways has 23,500 employees and annual revenues of almost $12.9 billion.
Earlier today, several users of the Qantas Airways app reported on social media that they were able to see other users' travel details, including personal identification details, boarding passes for upcoming flights and other account information.
Qantas quickly responded to the reports and confirmed an inadvertent exposure of sensitive information likely caused by recent system changes. The airline advised customers to log out of their “Frequent Flyer” account on the Qantas app and remain vigilant about scams on social media.
See also: R00TK1T: Data breach at Qatar Airways!
A later update announced the resolution of the issue, confirming that the incident was not caused by a cyberattack but by internal configuration changes that caused the exposure of information only in the Qantas Airways app.
"The issue was isolated to the Qantas app with some frequent flyers being able to see other customers' travel information, such as name, upcoming flight details, points balance and status," Qantas explained in statement .
“No other personal or financial information was disclosed and customers could not transfer or use other frequent flyers' Qantas Points.”
The airline added that it is not aware of any customers traveling with incorrect boarding passes, while it later added procedures to ensure that such issues are avoided, which could cause delays or security incidents at the airport.
See also: Anonymous Arabic hackers offer Silver RAT to other criminals
Users of the Qantas Airways app, which has over a million downloads on the Google Play store, are advised to remain vigilant for scams using this incident as a lure.
Source: bleepingcomputer
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
