The British Airways data breach saga, which first emerged in early September, has taken another painful turn for the airline.
British Airways disclosed on Thursday afternoon that a further 185,000 payment cards had potentially been compromised.
These cards had all been used to pay for Avios redemptions between 21st April and 28th July.
Only online bookings at ba.com were impacted. Redemptions made via the British Airways app or call centre are safe.
Note that ALL forms of Avios redemption appear to be impacted. You are included if you used Avios to part-pay for a car rental or hotel booking, according to BA.
It is important to note that this is 185,000 ADDITIONAL payment cards which are affected. British Airways seems to have massaged the headline figure by stripping out cards which were also caught up in the first data breach.
The latest disclosure is broken down as follows:
77,000 payment cards have had their name, billing address, email address, payment number, expiry and CVV potentially compromised
108,000 payment cards have been similarly compromised but without the CVV number
You will receive an email during Friday if you are impacted. According to BA:
“While we do not have conclusive evidence that the data was removed from British Airways’ systems, we are taking a prudent approach in notifying potentially affected customers, advising them to contact their bank or card provider as a precaution.”
On the upside, further investigation by British Airways into the original data breach last month has found that ‘only’ 244,000 payment cards have been compromised compared with the 380,000 figure originally claimed.
And, of course, Cathay Pacific revealed on Thursday that a whopping 9.4m sets of personal records had been unlawfully accessed. This includes credit card data.
In some ways, this breach could be worse for BA than the original. 185,000 people represents a high percentage of the active British Airways Executive Club base. The original breach will have caught up a lot of ‘once a year’ flyers whilst this one will be impacting people like us who make up a disproportionate part of BA revenue. Anyone who has already sat through the 2017 weekend IT failure and the recent failures of the new FLY check-in system will probably have had enough by now.
You can find the latest BA statement on this latest breach here.
PS. Having now seen the British Airways email, the heading “Update on Theft of Customer Data” is hugely misleading in my opinion and may lead to the email being deleted unread
(Want to earn more Avios? Click here to visit our home page for the latest articles on earning and spending your Avios points and click here to see how to earn more Avios from current offers and promotions.)