Qantas is refusing to say if it is being held to ransom by cyber criminals, after a data breach exposed customers' personal information.