British Airways Databreach – Card Payment Data For 380,000 Cards Stolen (Fined £183.4 million ($229.5USD million))

Update 7/8/19: UK Information Commissioner’s Office has issued a notice of intention to fine British Airways £183.4 million ($229.5USD million) due to General Data Protection Regulation (GDPR) infringements. British Airways partner company IAG has said that they plan to appeal this fine.

 

Original posts: British Airways is the latest company to suffer a data breach. Attackers were able to access sensitive information between August 21st & September 5th, 2018. Details of 380,000 credit cards were stolen, but travel and passport details were not affected. If you made a booking between August 21st and September 5th British time, then British Airways is advising you to contact your card issuer proactively to get a new card issued. Often larger issuers will automatically looking for transactions in this period and reissue cards accordingly, but it’s always good to be proactive.

It seems every other day a new data breach occurs. In my opinion cyber security isn’t taken seriously enough by large scale corporations as the penalties when a data breach occurs isn’t large enough.

Subscribe
Notify of
guest

27 Comments
newest
oldest most voted

Vic
Vic (@guest_1293938)
December 2, 2021 20:32

Payment received.

Vic
Vic (@guest_1231531)
July 29, 2021 22:59

BA has decided to settle. Payment incoming.

Vic
Vic (@guest_991600)
June 3, 2020 03:01

Got an e-mail a few days ago saying they’re changing the T&C to include class action waiver.
Very classy, British Airways..

john
john (@guest_781857)
July 11, 2019 19:18

The big problem is these big companies need to stop saving credit card data. Stop that. Just run the card then delete it. Companies are abusing the credit card system by doing it.

slowbrake
slowbrake (@guest_780141)
July 8, 2019 21:11

If it was Equifax – 85.8 billion dollars…..

I will vote for anyone who hints at that level at fines. Or for anyone who can make all this stolen data worthless to criminals.

J. Grant
J. Grant (@guest_780119)
July 8, 2019 20:18

I agree that the penalties arent big enough, especially as I sell security products and seeing how companies skirt around to save $. Pretty bad. Hope their entire IT staff gets the boot. Yes, I said it out loud.

Francisco
Francisco (@guest_780118)
July 8, 2019 20:13

I’m 99.9% sure my info was comprimieses as they charged my CSR for $6,000 around the time they reported a breach and I had purchased my BA tickets in that timeframe.

ryan t
ryan t (@guest_780115)
July 8, 2019 20:10

Now let’s hope GiftCardMall gets fairly punished as well.

Nick
Nick (@guest_780099)
July 8, 2019 19:23

I wish the fines paid were split among the impacted cardholders – why should the govt get it? They didn’t lose anything.

I could use $600

Mike
Mike (@guest_780110)
July 8, 2019 20:01

Credit card holders, at least in the US, are not liable for fraudulent charges, so they wouldn’t lose anything anyway. Crediting the fines to the government is equivalent to giving them to taxpayers, since that’s where the government gets its money.

JeffLA
JeffLA (@guest_643867)
September 18, 2018 02:13

CLOSE YOUR CARDS PEOPLE. I had booked award tickets with my Citi Prestige card during the people and procrastinated calling Citi. Yesterday I was hit with pending charges from the Apple store. So clearly people are working though the payment information.

Sa
Sa (@guest_780109)
July 8, 2019 19:58

People, people, people. Jeff, people, was there a datapoint here? If you have anything useful, could you please rewrite with words that give your message some meaning? Why should I close my card?

Liam
Liam (@guest_780257)
July 9, 2019 04:04
  Sa

Lol meant to replace the card number and close the card number not account.