Hacker attack exposes McDonald's, Disney and Qantas customer data!
A hacking group has published personal data of customers of over 40 global companies, including McDonald's and Disney, on the dark web.

Hacker attack exposes McDonald's, Disney and Qantas customer data!
A massive security breach has led to widespread exposure of personal data of customers and employees from more than 40 well-known companies. The companies affected include McDonald's, Disney, Adidas, Ikea, Gap, Vietnam Airlines and Toyota. The hacking group, known as Scattered Lapsus$ Hunters, released this sensitive information on the dark web after ransom demands were not met. This was done by dailyhodl.com reported.
According to experts, between April 2024 and September 2025, personal data of five million Qantas customers was stolen and published on the dark web. The information the hackers got their hands on included email addresses, phone numbers, dates of birth and frequent flyer numbers. This data breach occurs in a context in which companies are repeatedly at risk from cyberattacks.
Details about the data thefts
The attacks carried out by Scattered Lapsus$ Hunters resulted in numerous other companies being affected in addition to Qantas. The leaked data includes personal information such as birth dates, purchase histories and passport numbers, although no credit card or financial information was leaked. This was confirmed by Jeremy Kirk of Intel 471.
The public records were released in early October 2025 after a ransom deadline expired. The stolen information can be used for identity theft and other criminal activities, making protecting customers' and employees' personal information a top priority. In this context, Qantas is offering a 24/7 hotline and dedicated advice on identity protection for affected customers.
Implications for companies and customers
These incidents shine a bright light on the cybersecurity practices of many companies. The disclosure of the data makes it clear that even large and well-known brands are not immune to such attacks. Customers must be aware that their personal information is potentially at risk.
The ongoing threat of cybercrime is forcing companies to rethink and improve their security measures. It remains to be seen how affected companies will respond to this massive data breach and what long-term impact this could have on their business. Processing and supporting affected customers is necessary to restore trust.