Qantas confirms cyber-attack exposed records of up to 6 million customers