· News · 1 min read
6 Million Qantas Customers. One Third-Party Call Center.
Qantas confirmed a breach affecting up to 6 million customers. Names, emails, phone numbers, birth dates, frequent flyer numbers — all exposed.
The source? A third-party call center platform.
Not Qantas’s core systems. Not their main database. A vendor they trusted to handle customer calls.
This keeps happening. You can lock down your own infrastructure, but if your vendors aren’t held to the same standard, it doesn’t matter. Their breach becomes your headline.
The scary part? Most companies don’t have visibility into what data their vendors actually hold. They just assume it’s handled.
Assumption isn’t a security strategy.