Qantas facing 'significant' data theft after cyber attack