Qantas Airlines has confirmed a significant cyberattack that may have exposed the personal records of up to six million customers.