The personal data of 5.7 million Qantas customers has been released on the dark web by hackers, after a ransom date came and went yesterday.

Qantas was one of 40 companies caught up in the hack, alongside the likes of Toyota, Disney and IKEA when the hacker group Scattered Lapsus$ Hunters stole almost 1 billion records of customer data from cloud technology company Salesforce in July.

“If Salesforce does not engage with us to resolve this, we will completely target each and every individual customers (sic) of theirs listed below, failure to comply will result in massive consequences,” the statement from the hackers said.

In response, Salesforce insisted it would not “engage, negotiate with, or pay any extortion demand”.

The hackers did not break into the Salesforce system, but instead called the IT desks of the 40 companies and posed as legitimate employees.

In the case of Qantas, it is believed a call centre in the Philippines was targeted by the hackers.

The information of Qantas passengers believed to have been released includes date of birth, emails and frequent flyer numbers.

This includes a string of politicians’ home addresses and phone numbers, Cyber Security Coordinator Lieutenant General Michelle McGuinness confirmed in Senate estimates earlier this week.

“There has been a threat actor who has claimed to steal data… Qantas have notified all those who are impacted, and it may be that the threat actor has the data at this stage, the operational experts will, under normal circumstances, look to verify and that would be a question for our operational organisations,” she said.

It is not believed credit card details or passport numbers were compromised in the breach.

Qantas has been contacted for comment.

“We continue to offer a 24/7 support line and specialist identity protection advice to affected customers and through the ongoing injunction we obtained through the NSW Supreme Court we have legal protections in place to prevent the stolen data being accessed or released.”