Skip to content

Qantas Contact Center Suffers Major Cyber Attack

Unusual cyber activity detected in Qantas contact center on June 30, 2025, leading to potential customer data breach. The airline company acknowledged the incident and took prompt measures to contain it. In a statement, Qantas announced, "We found suspicious activity on a third-party platform...

Qantas Customer Service Center Faces Major Cyber Attack
Qantas Customer Service Center Faces Major Cyber Attack

Qantas Contact Center Suffers Major Cyber Attack

The Scattered Spider ransomware group, known for its sophisticated tactics, has claimed responsibility for a cyber attack against Qantas, Australia's national airline. This follows a series of similar attacks against American's Hawaiian Airlines and Canada's Westjet last week.

The group's targeted tactics often bypass traditional security measures, making them particularly dangerous. According to cybersecurity expert Tony Jarvis, Field CISO and VP APJ at Darktrace, such attacks underscore the importance of cybersecurity as a fundamental business priority.

The initial reports on the Qantas breach show striking similarities to attacks by the Scattered Spider ransomware group. The group is notorious for targeting IT help desks and manipulating people through phishing, Multi Factor Authentication (MFA) bombing, and SIM swapping to gain access.

Jarvis has informed ACSM about the Qantas cyber breach. The exact impact on Qantas' operations (both digital and physical) and brand/reputation is yet to be seen.

This incident serves as a reminder of the risks associated with third-party attacks. The Scattered Spider ransomware group operates with the intent to cause disruption and demand ransom. They are linked to Russian-speaking cybercriminal networks and have operational and technical characteristics suggesting origins in Russian-speaking countries, with connections also noted to groups associated with North Korea.

The group's infrastructure and activities are embedded in these regions. Interestingly, they are thought to be native English speakers, a fact that adds another layer of complexity to their operations.

In April, the Scattered Spider ransomware group was responsible for the crippling attack against Marks & Spencer in the UK. The group's tactics, which involve exploiting both technical vulnerabilities and manipulating people, make them a formidable threat in the cybersecurity landscape.

As businesses continue to digitalise, the need for robust cybersecurity measures becomes increasingly crucial. The Qantas cyber breach serves as a stark reminder of this reality.

Read also:

Latest