4 ms·
> The Qantas data, which was stolen from a Salesforce database in a major cyber-attack in June, included customers’ email addresses, phone numbers, birth dates
by nomilk 1y ago
> The Qantas data, which was stolen from a Salesforce database in a major cyber-attack in June, included customers’ email addresses, phone numbers, birth dates and frequent flyer numbers. It did not contain credit card details, financial information or passport details.
Curious, what's the worst a bad actor do with name, email address, phone number and birth date?
- spwa4 1y agoAuthenticate to phone banking in the name of a customer and request a personal loan. And in general, open a large line of credit in someone else's name.
- SteveNuts 1y agoWhere can you do all that without a social security number?
- whatevaa 1y agoIt's not like those numbers haven't already been leaked elsewhere.
- sammy2255 1y agoThere's no concept of social security number in Australia
- esseph 1y agoI feel like I get about a notification every 2 months now for a service I used maybe once 5 or 10 years ago getting breached/extorted/leaked.
- airstrike 1y agoA SSN should never be used as a "password".
- anonzzzies 1y agoThis you can do somewhere? My bank asks me 20 questions (many like my first pet name, the last transaction I did etc) and then calls me back on the registered phone number. That data alone should get you nothing really. For credit here , small or large, you have to prove you are you or you get a nice police escort. Most of these apps, even if you are already registered, want you to tap your passport to nfc and scan your face for anything serious.
- deleted 1y ago[deleted]
- LadyCailin 1y agoYour bank, sure. But what about all the other banks? Just need to target the weakest link.
- jvvw 1y agoSurely name, email, phone and date of birth aren't enough to do this at any bank? That's not quite public info but near enough. I've filled that in on hundreds of forms during my life and it's info that any of my friends have.
- anonzzzies 1y agoNot at any bank here and don't think anywhere: AML KYC rules would cut that down at least everywhere I know.
- spwa4 1y agoPretty easy at stores for example.
- jacquesm 1y agoApply for a credit card.
- geor9e 1y agostill need more info. SSN for one.
- smallstepforman 1y agoNo SSN in Australia, who are the bulk of Qantas customers.
- andsoitis 1y agoTo apply for a credit card in Australia, you need to supply at least two forms of ID, such as an Australian driver's license, passport, or Medicare card.
- fph 1y agoDo the banks actually check that the documents are legit? I'm sure your favorite LLM can generate pictures of all these documents in the blink of an eye.
- andsoitis 1y agoYes. Why do you think they wouldn’t?
- monerozcash 1y agoBecause they usually don't, and they certainly don't in Australia where it's essentially impossible. The government run IDMatch DVS can verify that the biographic information is correct, but can not verify the authenticity of the document. This kind of fraud is not special in Australia, it happens thousands of times every single day. There is currently no way to prevent it.
- pards 1y agoAnd yet later in the article it states: > global data was stolen between April 2024 and September 2025 and includes personal and contact information of the companies’ customers and employees, including dates of birth, purchase histories and passport numbers. which contradicts the previous statement
- zzzeek 1y agoscam call you with further fake extortions like "I'm in jail mom you need to bail me out!" since they have birthdates they can target older people for this. my mom has received at least four of these calls, since I always get the "ARE YOU OK? WAS THAT A SCAM?" phone call afterwards. the first time it happened, they were about to go to the bank to wire money when dad said, "let's try calling his cell!" we'd like to think these scams are stupid but unfortunately they work
- esseph 1y agoThe breach included passport details ;)
- hmottestad 1y agoPhishing. Super easy now to send a fake email with a great offer, and have your name and loyalty programme number right there in the email. Much easier to trick someone when your email contains a bunch of personal info that you wouldn’t assume others to have. «Happy birthday! As a loyal Quantas customer, we would like to offer you a sneak peek of our upcoming Black Friday deals. Consider it a little birthday present from us.»
- throwaway984393 1y ago[dead]