Plaintiff law firm, Maurice Blackburn, has filed a formal privacy complaint against Qantas after a massive data breach compromised the personal information of 5.7 million customers. The breach, occurring on 30 June 2025, involved unauthorized access to a third-party platform used by a Qantas contact centre.
The exposed data includes highly sensitive customer details such as names, contact information, dates of birth, frequent flyer numbers, and even meal preferences—raising serious privacy and security concerns.
Maurice Blackburn’s representative complaint to the Office of the Australian Information Commissioner (OAIC) alleges Qantas failed to take “reasonable steps” to safeguard personal data, potentially breaching the Privacy Act 1988. The OAIC is now monitoring Qantas’s compliance under the Notifiable Data Breaches scheme.
Impacted customers are encouraged to register with Maurice Blackburn for updates and potential compensation as investigations continue. The firm stresses that registration is free and non-binding.
The Maurice Blackburn media release is below –
Australia’s leading plaintiff law firm has lodged a representative complaint with the Office of the Australian Information Commissioner (OAIC) on behalf of affected individuals following the recent Qantas data breach, which compromised the personal information of 5.7 million of the airline’s customers.
18 July 2025
The breach, which occurred on 30 June 2025, involved unauthorized access to a third-party customer servicing platform used by a Qantas contact centre.
The scale and sensitivity of the exposed data have raised serious concerns. Information compromised includes customers’ name, address, email address, phone number, date of birth, Qantas Frequent Flyer numbers, tier, points balance, status credits, gender and meal preference.
The complaint alleges that Qantas failed to take reasonable steps to protect personal information, constituting a interference with privacy under the Privacy Act 1988. The OAIC has acknowledged receipt of Qantas’s notification under the Notifiable Data Breaches (NDB) scheme and is monitoring the airline’s compliance.
Maurice Blackburn Principal lawyer Elizabeth O’Shea said the complaint was lodged with the OAIC late yesterday.
“Maurice Blackburn has now taken action against Qantas over its mass customer data breach that has reportedly affected 5.7million people,” Ms O’Shea said.
“We’ve filed an official complaint with the Office of the Information Commissioner, which is the authority charged with taking action over breaches of the Privacy Act.”
“While we await a response and potential action from the OAIC in relation to Qantas failing to adequately protect the personal information of its customers, we would encourage Qantas customers who were impacted by the breach to register with us to receive updates about the representative complaint and compensation which may be sought on your behalf. Registration is free and non-binding.”
“It is early days in what we are learning about the mass data breach, but if you’re one of the millions of people that have had your personal information compromised, you’re eligible to register with us and we will keep you informed as the matter progresses.”
Affected individuals are encouraged to monitor communications from Qantas and remain vigilant against potential scams. Identity protection resources are available via Qantas’s dedicated support line and the OAIC website.
Maurice Blackburn encourages Qantas customers who were impacted by the breach to register with the representative complaint via the Maurice Blackburn website to receive updates about the representative complaint and compensation which may be sought on your behalf.
Maurice Blackburn is Australia’s leading class actions law firm with an unparalleled record of helping our clients secure the nation’s largest class actions recoveries, totalling over $5 billion since 1998.
