QANTAS: Data hack sparks class-action push. Here’s how flyers can join the fight

That major data breach affecting around 5.7 million Qantas customers has sparked a potential class action. Although Qantas has been seen to act responsibly in keeping affected customers informed, that alone does not mitigate their potential legal liability. Australia’s leading class-action firm, Maurice Blackburn, has lodged a representative complaint—and they’re inviting affected flyers to sign up.

Background

On 30 June, hackers used voice phishing (or “vishing”) to exploit Qantas’s Manila-based call centre, accessing records that included names, email addresses, phone numbers, birth dates, Frequent Flyer numbers, membership tiers and even meal preferences. Crucially, no credit card details, passwords or passports were leaked.

Maurice Blackburn wasted no time, filing a complaint with the Office of the Australian Information Commissioner (OAIC). They allege Qantas failed in its responsibility to protect customer data, even when it was handled overseas.

However, don’t get too excited, there are many legal steps to tread before compensation might be awarded.

Who is Maurice Blackburn—and why you should care

Maurice Blackburn is one of Australia’s leading plaintiff class-action legal practices. They claim to have won more than $5 billion in recoveries. Their track record includes high-profile data breach claims, including Optus and Medibank.

They’ve confirmed that affected customers can register their interest now, at no charge, and with no upfront costs, thanks to their ‘no win, no fee’ approach to this style of litigation.

How to register and what happens next

Maurice Blackburn encourages those impacted to register via their website or phone hotline (1800 111 222).

Once registered, you’ll receive updates on the complaint’s progress and an invitation to join a full-scale class action if and when the OAIC takes action. If Qantas is found liable, then you will be advised of compensation pathways.

Although joining the action will not cost you anything, if there is a successful action, the payment to the lawyers, Maurice Blackburn, will come out of the settlement. They don’t take this kind of risk out of the goodness of their hearts. Any payment to the lawyers will reflect the risk they have taken.

What this means for flyers

With key personal details exposed, flyers face a heightened risk of targeted phishing and impersonation scams via email, text or phone. Maurice Blackburn’s involvement means this could escalate into a national legal response, potentially resulting in financial compensation for those affected.

2PAXfly Takeout

If you’ve booked, flown, or contacted Qantas since mid-2024, this applies to you. Qantas is defending itself with court-backed injunctions and containment measures, but Maurice Blackburn’s class action means customers may have a collective route to compensation.

If you are affected, Qantas has almost certainly contacted you multiple times, keeping you up-to-date. If you want to be considered for compensation under the proposed legal action, then register with Maurice Blackburn. You will be giving them your data, but it won’t cost you any money.

Whatever you decide, you should enhance your security by enabling multi-factor authentication with Qantas and monitoring any unusual communication on your devices.