Qantas cyber hack proves it's time to get real about your points

Herald Sun

09-07-2025

Don't miss out on the headlines from Lifestyle. Followed categories will be added to My News.
A lot has been happening with Qantas lately between a cyber incident and an upcoming points devaluation. Both serve as a timely reminder: your points are as valuable as cash.
In the last week, Qantas confirmed it was the victim of a data breach impacting up to six million customers. The breach stemmed from unauthorised access to a third-party customer service platform used by one of its call centers in the Philippines. Compromised data includes full names, email addresses, phone numbers, dates of birth and frequent flyer membership numbers.
Qantas has reassured members that credit card details, personal financial information and passport details are not held in this system. While some Frequent Flyer numbers were accessed, no Frequent Flyer accounts were compromised, nor have passwords, PINs or log in details been accessed.
Your passwords weren't accessed in the breach, but your name, email and phone number could well have been.
A few weeks before this incident, Qantas announced it is increasing the number of Frequent Flyer points required to secure a Classic Reward fare. Not uncommon among airline loyalty programs, this effectively moves the goalpost and requires more points for the same fare.
As I woke up to news about the breach – and being points obsessed – my first instinct was to double check my points balance.
Do you know your points balance?
It made me wonder how many Frequent Flyers actually know their points balance.
If any went missing, would you know about it? How often do you check your Woolies grocery runs are trickling in? What are your plans for your points? If you have to think about the answer to all of these questions, it's time to pay more attention. Hackers treat them like currency and it's time you did too.
Here's how to protect your balance.
Monitor your points like you would your bank account
Frequent flyer points are as good as cash. Every month, log in and check everything is in order. If your points are auto converting from BP Rewards or Everyday Rewards, check they are landing. If something doesn't look right, report it immediately via the Qantas support line.
Be aware of scams
Scammers are likely to ride the coattails of the breach and send phishing emails or texts that look like they are from Qantas. Avoid clicking links in messages and double check the sender's email. Instead, call or go to the Qantas website to verify any communication.
If you're worried about the breach, keep an eye out from scammers pretending to be Qantas, and set up two factor authentication on your account.
Use unique and strong passwords
Qantas123 as a password doesn't cut it. While passwords and PINs weren't compromised, and Qantas reassures members there's no need to change either of them, it is a good reminder to make sure you are using strong and unique passwords. If you haven't already, set up Two-Factor Authentication (2FA) on your Qantas Frequent Flyer by logging into your account.
Have a plan for your points
If you've been hoarding points without a goal, it's time to rethink that. Your points have no value until you cash them in. And as of August 5, just like a foreign currency can suddenly lose value, their buying power is about to drop. Whether it's a flight redemption or an upgrade to business, make a plan for your points and make them work for you!
See also: Points Guru: Can I sell my Qantas frequent flyer points?
Concerned about your information?
All impacted customers over the age of 15 were notified over email – be sure to check your junk or spam folder in case it landed there. Qantas members can contact the airline's dedicated support line on 1800 971 541 or [phone]. Impacted members will have access to specialist identity protection advice and resources through this team.
Originally published as Qantas cyber hack proves it's time to get real about your points