British Airways reveal data hack of 380,000 customers' personal and financial information

British Airways have announced that, the personal and financial details of customers making bookings on their website and app between 21st August 2018 and 5th September 5 2018 were compromised.

The hacked information includes customers’ names, email addresses and credit card details, including the credit card number, expiration date and the three digit [CVV] code on the back of the credit card.  It is reported that this includes the details of 380,000 payment cards. British Airways state that they will be contacting affected customers directly and are advising them to contact their banks or credit card providers and follow their recommended advice.

British Airways state that they are urgently investigating the matter but have provided no further details of who was responsible for the data breach, what has happened to customers’ information and whether there is any evidence that affected customers have been the victims of fraud. British Airways have confirmed that they are committed to compensating affected customers who have been financially affected by the data breach.

Sean Humber, a leading data protection lawyer at Leigh Day who acts for victims of cybercrime said: “This is just the latest in a recent spate of worrying data breaches from companies handling confidential personal information online on behalf of their customers.

"What makes this data breach particularly serious is that customers’ financial details have been stolen so potentially leaving them exposed to the risk of fraud.

“If it turns out that the data theft was a result of inadequate security systems employed by British Airways then, in addition to facing a swingeing fine from the Information Commissioner’s Office for breaching the General Data Protection Regulation (GDPR), it is likely that affected customers will be entitled to compensation for the distress and inconvenience caused, as well as any financial losses they may have suffered.

"British Airways now need to contact affected customers without any further delay so that they can take the necessary action to protect themselves from fraud and reassure them that they will compensate them for any losses suffered as a result of this data breach, but also for any distress and inconvenience caused.”