Perimeter breach detected 30 Jun, confirmed 2 Jul 2025 via a Salesforce contact centre instance in Manila. Compromised data includes customer names, dates of birth, emails, and Frequent Flyer numbers. Data leaked online in Oct 2025; NSW Supreme Court injunction sought to prevent further dissemination.