British Airways are investigating the theft of customer data from its website and mobile app. The stolen data did not include travel or passport details.
We are investigating the theft of customer data from our website and our mobile app, as a matter of urgency. For more information, please click the following link:https://t.co/2dMgjw1p4r
— British Airways (@British_Airways) 6 September 2018
From 22:58 BST August 21 2018 until 21:45 BST September 5 2018 inclusive, the personal and financial details of customers making or changing bookings on the website and app were compromised.
The breach has been resolved and their website is working normally. They have notified the police and relevant authorities.
The personal and financial details of customers making or changing bookings on ba.com and the airline’s mobile app were compromised. No passport or travel details were stolen.
BA says the hackers stole names, email addresses and credit card information – that would be the credit card number, expiration date and the three digit CVV code on the back of the credit card. BA insists it did not store the CVC numbers. Security researchers are now speculating the card details were intercepted, as opposed to being harvested from a BA database.
If you’ve been affected, you should change your online passwords. Then monitor your bank and credit card accounts keeping an eye out for any unwanted transactions.
Further details – https://www.britishairways.com/en-gb/information/incident/data-theft/latest-information?dr=&dt=British%20Airways&tier=&scheme=&logintype=public&audience=travel&CUSTSEG=&GGLMember=&ban=%7C%7CP1M%7C%7C%7C%7C%7C%7C%7CHOME%7C%7C%7C%7CL4%7C%7C%7C%7Canonymous-inspiration%7C%7C%7C&KMtag=c&KMver=1.0&clickpage=HOME