Australia’s Qantas apologised after a mobile app glitch allowed customers to view others' flight details twice, prompting an apology for the breach. The airline reassured that no financial information was exposed, and there was no unauthorized flight boarding. Although not a cyber security incident, the breach could have led to serious risks like identity theft or phishing scams

 Qantas apologises for mobile app data breach

Qantas attributed the issue to a technology error possibly linked to recent system changes. The incident underscores the importance of API security, with APIs becoming a prime target for cyber attacks due to their critical role and frequent usage. Qantas advised customers to stay vigilant against potential scams and fraud resulting from the breach, which might have legal implications under data protection regulations like the Australian Privacy Act or GDPR.
https://www.computerweekly.com/news/366583075/Australias-Qantas-apologises-for-mobile-app-data-breach