{"id":159731,"date":"2026-10-06T09:05:43","date_gmt":"2026-10-06T03:35:43","guid":{"rendered":"https:\/\/aviationa2z.com\/?p=159731"},"modified":"2026-10-06T00:05:59","modified_gmt":"2026-10-05T18:35:59","slug":"qantas-customer-data-breach-suspect-detained-in-jordan","status":"publish","type":"post","link":"https:\/\/aviationa2z.com\/index.php\/2026\/10\/06\/qantas-customer-data-breach-suspect-detained-in-jordan\/","title":{"rendered":"Qantas 5.7 Million Customer Data Breach Suspect Detained in Jordan"},"content":{"rendered":"\n

JORDAN\u2014<\/strong> A suspected member of the ShinyHunters hacking group linked to major corporate data breaches has been detained by authorities and is reportedly cooperating with the FBI as investigators expand their efforts to identify other members.<\/p>\n\n\n\n

The suspect, Saif al-Din Khader, is known online as \u201cRey\u201d and was detained in Jordan last week, according to people familiar with the matter.<\/p>\n\n\n\n

The development could add momentum to an international investigation into the hacking network, which has been associated with the theft of data from several major organisations. <\/p>\n\n\n\n

Qantas (QF)<\/a> was among the companies affected after a cyberattack in June 2025 exposed data belonging to 5.7 million customers.<\/p>\n\n\n\n

\"Qantas
Photo: Qantas<\/figcaption><\/figure>\n\n\n\n

ShinyHunters Investigation Expands<\/h2>\n\n\n\n

Khader is reportedly assisting the FBI<\/a> and other international law enforcement agencies in identifying additional members of ShinyHunters.<\/p>\n\n\n\n

One source said investigators were examining his electronic devices and digital communications as part of efforts to map the group and locate other suspected hackers.<\/p>\n\n\n\n

The FBI has not confirmed Khader\u2019s detention or commented specifically on activity in Jordan. However, the bureau said it had already worked with international partners to arrest multiple suspects and would use all available resources to bring those responsible for the cyberattacks to justice.<\/p>\n\n\n\n

The latest development follows the arrest in the Netherlands of a 24-year-old Amsterdam man suspected of involvement with ShinyHunters. FBI Director Kash Patel subsequently said investigators were pursuing new leads and warned that further arrests remained possible.<\/p>\n\n\n\n

\"Qantas
Photo: Cl\u00e9ment Alloing<\/figcaption><\/figure>\n\n\n\n

Qantas Data Breach<\/h2>\n\n\n\n

The Qantas cyberattack began when a caller posing as IT support persuaded an employee at an offshore call centre to connect the airline\u2019s Salesforce customer platform to a malicious data-extraction tool. <\/p>\n\n\n\n

The incident allowed hackers to access a large volume of customer information before the airline responded to the breach.<\/p>\n\n\n\n

Qantas later confirmed that 5.7 million unique customer records had been compromised. Most affected records contained names, email addresses and frequent-flyer information, while around 1.7 million records also included details such as addresses, dates of birth, telephone numbers and meal preferences.<\/p>\n\n\n\n

The airline said passport and credit-card information was not stored on the affected system. Cybersecurity researchers subsequently linked the wider Scattered Lapsus$ Hunters network to the release of millions of Qantas customer records on the dark web.<\/p>\n\n\n\n

\"Two
Photo: James St. John | Flickr<\/figcaption><\/figure>\n\n\n\n

More Arrests Possible<\/h2>\n\n\n\n

Khader was previously identified by security journalist Brian Krebs as an administrator of Scattered Lapsus$ Hunters, a loose alliance involving several hacking groups, including ShinyHunters. <\/p>\n\n\n\n

Khader had reportedly told Krebs that he wanted to leave the hacking community and had been cooperating with law enforcement since June 2025.<\/p>\n\n\n\n

Neither Reuters nor law enforcement authorities have alleged that Khader personally participated in the Qantas cyberattack. <\/p>\n\n\n\n

His reported cooperation could nevertheless provide investigators with information about the structure, communications and activities of the wider network.<\/p>\n\n\n\n

ShinyHunters has continued to attract international attention after claiming attacks against organisations including Rockstar Games and education platform Canvas, <\/p>\n\n\n\n

The group also recently claimed to have stolen information relating to FBI employees, while its dark-web website subsequently went offline after the FBI refused to meet its demands, The Sydney Morning Herald<\/a> flagged.<\/p>\n\n\n\n

Stay tuned with us. Further, follow us on social media for the latest updates.<\/p>\n\n\n\n

Join us on\u00a0Telegram Group\u00a0<\/a>for the Latest Aviation Updates. Subsequently, follow us on\u00a0Google News<\/a><\/p>\n\n\n\n

\n
Qantas Faces New Lawsuit After Passenger Falls While Boarding Albury Flight<\/a><\/blockquote>