Qantas confirms cyber-attack exposed records of up to 6 million customers:

The data includes customer names, email addresses, phone numbers, birth dates and frequent flyer numbers. It did not contain credit card details, financial information or passport details.

So it only contained everything required to obtain credit card details, financial information or passport details.