Class action alleges Qantas ‘failed’ to protect personal information in wake of major data breach

A leading law firm has claimed Qantas “failed” to protect personal information after a system containing nearly six million accounts were compromised.

Qantas failed to protect passengers’ personal information, according to a law firm seeking potential compensation from the airline after a major data breach.

Maurice Blackburn Lawyers have lodged a complaint with the Office of the Australian Information Commissioner (OAIC), alleging the airline “failed to take reasonable steps to protect personal information” and therefore interfered with privacy under the privacy act.

The details of nearly six million Qantas customers were potentially compromised in the data breach of one of the airline’s call centres on June 30, including addresses, phone numbers, meal preferences, and Frequent Flyer details.

Qantas has confirmed there is no evidence of any personal data being released, nor credit card or passport details or personal financial information accessed.

A class action has been launched against Qantas in the wake of a major data breach that affected nearly six million accounts. Picture: NewsWire / Jeremy Piper

‘Register with us’

Maurice Blackburn principal lawyer Elizabeth O’Shea confirmed an official complaint had been lodged against the airline, encouraging those affected in the breach to register with the firm to receive updates about potential compensation.

“While we await a response and potential action from the OAIC in relation to Qantas failing to adequately protect the personal information of its customers, we would encourage Qantas customers who were impacted by the breach to register with us to receive updates about the representative complaint and compensation which may be sought on your behalf,” Ms O’Shea said in a statement.

“It is early days in what we are learning about the mass data breach, but if you’re one of the millions of people that have had your personal information compromised, you’re eligible to register with us and we will keep you informed as the matter progresses.”

The details of nearly six million Qantas customers were compromised in the data breach. Picture: NewsWire / David Swift

A Qantas spokeswoman said the company remained focused on supporting customers.

“Qantas understands that a complaint has been lodged by Maurice Blackburn on behalf of some affected customers in relation to our recent cyber incident,” the spokeswoman said.

“Our focus continues to be on supporting our customers and providing ongoing access to specialist identity protection advice and resources.”

Qantas have moved to prevent the stolen data from being accessed, viewed, released, used, transmitted or published by anyone, including third parties, following the granting of an interim injunction in the NSW Supreme Court.

Maurice Blackburn have alleged Qantas ‘failed to take reasonable steps to protect personal information’ in a complaint to the and therefore interfered with privacy under the privacy act. Picture: NewsWire / Luis Enrique Ascui

The airline also filed a statement of claim against anyone who carried out, participated or assisted in stealing of the data, communicated payment demands to Qantas, or posted some or all of the stolen data online.

The defendant, and any third parties, were prevented by the court from publishing the stolen data online, transmitting or disclosing it to any other person, using and viewing any of the data except for the purpose of gaining legal advice, and promoting or publishing any links where the data may be downloaded without the written consent of Qantas.

They were also ordered to take all reasonable steps to remove the data from the internet, including any “dark web” locations.