PHP Vulnerability Responses by Company

Qantas Airways Limited

Companies / web services
Aliases / services
カンタス航空 / Qantas / 澳洲航空 / Qantas Airways Limited
Official website
https://www.qantas.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Airline customer service / Frequent Flyer records

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

Abnormal activity was detected on a third-party customer platform on 30 June 2025. The 12 October notice confirms release of stolen data; card/passport details and passwords were not in the affected platform.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check your individual notice. Verify messages claiming to be Qantas through official channels, enable two-step authentication where available and never disclose passwords.

Official service URL

Source URLs

  1. Customer incident, updated 12 October 2025https://www.qantas.com/en-au/help/cyber-safety-scams/cyber-incidentService and operation documentation
Related official sources
  1. Official operator identityOfficial information directoryLegal name and operator checked.
  2. Customer incident, updated 12 October 2025Official notice; link to this PHP incident unconfirmedVerifies the named service at the notice date; not evidence of remediation for the current PHP vulnerabilities.

Comments