Home/Incidents/Qantas / Capella Sydney

Qantas / Capella Sydney

17 Sep 2026 · National · Aviation
Supply Chain Attack HIGH ✓ Verified

What happened

Qantas launched a security investigation alongside luxury hotel chain Capella Sydney following targeted cyber-enabled scams against airline passengers and hotel guests. Cyber criminals gained unauthorized access to reservation and booking management environments via a third-party corporate travel platform, using compromised guest itineraries, full names, check-in dates, and contact details to issue highly personalized phishing solicitations demanding fraudulent credit card verification payments. Qantas and Capella Sydney isolated the compromised booking channels, alerted affected clientele, and engaged external cyber security teams to remediate the third-party integration vulnerability.

Incident details

Organisation
Qantas / Capella Sydney
Date
17 Sep 2026
Attack type
Supply Chain Attack
Severity
HIGH
Sector
Aviation
State
National
Records affected
Unknown
Threat actor
Unknown

Source

afr.com ↗
← Back to all incidents