A huge percentage of Head for Points readers, including myself and my wife, are currently locked out of their Avios accounts.
Changing the password simply shows a zero Avios balance which BA appears to have confiscated ‘for my own good’.
I don’t know anything more except what has been said in the email below. Looking at reports on Flyertalk, it seems that there is NOT a specific exterior service causing the problem. AwardWallet and TripIt have NOT been compromised.
However, my best guess is that BA is trying to find accounts which HAVE been the target of suspected hacks. If you are registered with AwardWallet then your account will have been accessed from outside the UK by AW on a regular basis and this may have flagged you as high risk. This is only a guess.
I have nothing more to add which adds to the discussion, to be honest. We can use this article for comments on the topic, however.
The letter from BA goes:
British Airways has become aware of some unauthorised activity in relation to your Executive Club account.
This appears to have been the result of a third party using information obtained elsewhere on the internet, via an automated process, to try to gain access to your Executive Club account.
We understand this was login information relating to a different online service which you may have also used to access your Executive Club account.
We would like to reassure you that, although it does appear that the login attempt was successful, at this stage we are not aware of any access to any subsequent information pages within your account, including your flight history or payment card details.
We have now locked down your online account to protect it from further access. As part of the lock-down process we have also changed your password and you will need to reset it before you are able to use your account.
If you use the same login details for your Executive Club account as you do for your online accounts with any other organisations, we would also recommend that you change the passwords for these accounts, as well as exercising vigilance regarding any unusual or suspicious use of your personal data.
For a short period of time, as a precaution, we have also suspended the use of Avios on your account. We will let you know when this suspension period is over.
In the meantime, however, if you wish to spend your Avios please contact us via your local Executive Club service centre. We will be able to reactivate your account by asking you some additional security questions.
We are sorry for the concern and inconvenience this matter may have caused you and would like to reassure you that we are taking this incident seriously.
British Airways Executive Club team