Qantas breach sparks national push for stronger cyber resilience

The recent cyber attack on Qantas, which saw the personal data of approximately 6 million Australians compromised, has triggered nationwide concern and reignited discussions about the state of the country's cyber resilience.

Industry experts underline that the breach is not simply an issue for the airline or its customers but a critical moment for Australia's digital infrastructure and security policies.

According to Professor Craig Costello, a leading cryptologist and Professor at the Queensland University of Technology, the ramifications of the attack extend well beyond corporate damage.

Costello explained, "The Qantas breach is more than just a corporate and Qantas-consumer issue, but indeed a national concern. When personal data like names, emails, and birthdates are compromised, the ripple effect can hit every platform where those details are reused, dramatically increasing the risk of further hacks and phishing scams."

Costello highlighted the need for immediate action from affected individuals, such as updating passwords and enabling two-factor authentication. He warned that short-term fixes are not sufficient to address the deeper vulnerabilities exposed by the incident.

"Australia must prioritise cyber education and invest in building a tech-savvy, cyber-resilient society, otherwise we'll remain dangerously exposed in an increasingly digital world," he said.

Costello described the breach as a "blinding reminder that cybersecurity is no longer a niche, but national infrastructure." He called for a comprehensive approach to cyber resilience, urging investment not only in technology, but also in the education of all Australians.

According to Costello, "Our digital future hinges on more than strong passwords, it demands national investment in cyber education and tech skills. From primary schools to postgraduate study, we must build a tech-ready, cyber-resilient population. Because the next breach isn't a matter of 'if', but 'when', and we need a workforce ready to defend against it."

The Qantas incident has also reignited the complex debate around ransomware payments. Craig Searle, director at Trustwave and global leader of its cyber advisory team, weighed in on the risks facing organisations when data theft or ransom demands occur.

"The Qantas breach has reignited the ongoing debate about whether paying a ransom is ever justifiable. Official guidance and common thinking say not to pay; however, some organisations may see payment as a last-resort risk mitigation tactic in certain cases, such as where critical infrastructure is affected or data release could cause irreparable harm," Searle said.

At Trustwave, the advice remains firm against paying ransoms. Searle clarified, "We do not recommend that a ransomware victim succumb to the pressure and pay an attacker. However, when scenario planning for a potential ransom, the more useful question for boards to ask is not 'should we pay?' Rather, it is 'under what conditions might we consider paying?'" This shift in perspective, he argued, leads to more clearheaded, scenario-based planning before emotions and pressure distort decision-making."

Searle pointed out that payment rarely assures a secure or satisfactory resolution, noting, "Threat actors aren't bound by a contract and, in many high-profile incidents, payment has failed to prevent leaks or restore systems."

He recommended that organisations focus instead on robust incident response plans, including comprehensive backups and tested recovery strategies. "Every organisation must undertake regular, mature scenario planning and define a stance aligned with their risk appetite, customer obligations, and operational realities, because making that decision during a breach is already too late," Searle concluded.

The Qantas breach serves as a stark warning regarding the dangers posed by increasingly sophisticated cyber threats, shining a light on the urgent necessity for both improved technical defences and nationwide digital education. Experts agree: Australia's future digital security now relies on coordinated action from individuals, businesses, and the government alike.