Skip to content
Information Technology, Internet

Monash expert: Qantas mobile app glitch exposes customer information

Monash University 2 mins read
  • Media:

A Monash University expert is available to comment on reports of Qantas customers having access to other passengers' information on their mobile app, and what needs to be done to protect against such incidents in the future. 

 

Dr Muhammed Esgin, Department of Software Systems & Cybersecurity, Faculty of Information Technology

Contact details: +61 450 501 248 or media@monash.edu  

  • Cybersecurity
  • Privacy-enhancing technologies
  • Blockchain technologies
  • Quantum-safe cryptography

The following can be attributed to Dr Esgin:

“It is too early to tell what exactly caused the issue. However, it is certainly a privacy concern given (unauthorised) people are able to see personal information about other Qantas passengers. 

 

“Many companies store customer information in a database and mobile applications need to first authenticate a customer to make sure that it is really the right person being granted access. Then typically the app is allowed to retrieve information from the database about that particular user only and not others, unless permission is granted. The issue seems to be that somehow the app is retrieving private information about other users.

 

“To prevent such issues, there needs to be proper authentication, authorisation and access control in place. That means we need to make sure that it is really the right person, accessing the right information and nothing beyond what is permitted.

 

“Unfortunately, these kinds of personal information exposure can be exploited by cybercriminals. It is difficult to measure the extent of the exploitation at this point as we may not be able to fully understand how much sensitive information has been exposed. However, a common strategy of cybercriminals is to use such sensitive information and situations like this to scam users, for example by pretending to be calling/texting/emailing from Qantas or using the sensitive information leaked to present a more convincing scenario to their victims.

 

“We certainly need better training around cybersecurity and its best practices. The software systems we rely on today are quite complex and minor changes may lead to significant issues. Therefore, we need cybersecurity trained people implementing changes carefully whenever needed under stringent protocols to ensure that inadvertent privacy breaches do not arise.”

 

For any other topics on which you may be seeking expert comment, contact the Monash University Media Unit on +61 3 9903 4840 or media@monash.edu. For more Monash media stories visit our news & events site

More from this category

  • Information Technology, Manufacturing
  • 03/04/2025
  • 11:22
Rockwell Automation

Rockwell Automation and AWS Collaborate to Transform Manufacturing Through Advanced Industrial Automation Solutions at Hannover Messe 2025

The companies combine their expertise to help accelerate the manufacturing industry’s digital transformation with cloud-enabled offerings Rockwell Automation (NYSE: ROK), the world’s largest company…

  • Contains:
  • Information Technology
  • 03/04/2025
  • 07:11
AnywhereNow

Anywhere365 drives the transformation of customer experience with AI, and unveils new identity: AnywhereNow

Perth, Australia 3 April 2025 - Anywhere365, a global pioneer in transforming customer experience with AI solutions, has unveiled its new brand identity, AnywhereNow. Building on the company’s history, the new brand steps up into a faster paced identity, incorporating an urban theme that reflects a new sense of urgency, but still retains the company's core values of innovation, accountability, customer-first approach and caring. AnywhereNow's AI solutions help contact centres deliver exceptional value through enhanced engagement, efficient workforce collaboration, AI-driven insights and a comprehensive omni-channel service. AnywhereNow will continue to build on its AI-first strategy, embedding Agentic AI into all phases of customer…

  • Information Technology
  • 02/04/2025
  • 00:25
Ai-Media Technologies LLC

AI-Media Partners with AudioShake to Revolutionize Live Sports Audio and AI Voice Translation

NEW YORK, April 01, 2025 (GLOBE NEWSWIRE) -- AI-Media, the global leader in AI-powered language technology and solutions, is thrilled to announce an advanced partnership with AudioShake, a pioneering audio technology company specializing in sound separation. This partnership will enhance AI-Media’s LEXI Voice solution, creating a fully automated, high-quality mix with real-time AI voice translation - setting a new industry standard for live broadcast audio.AudioShake’s state-of-the-art technology can isolate dialogue from noisy environments such as live sports, music concerts, and news feeds. This capability will enable AI-Media to separate and clean up mixed sports audio - including commentary and stadium…

Media Outreach made fast, easy, simple.

Feature your press release on Medianet's News Hub every time you distribute with Medianet. Pay per release or save with a subscription.