Maximise your Avios, air miles and hotel points

British Airways discloses massive new credit card data breach covering Avios redemption flights

Links on Head for Points may support the site by paying a commission.  See here for all partner links.

The British Airways data breach saga, which first emerged in early September, has taken another painful turn for the airline.

British Airways disclosed on Thursday afternoon that a further 185,000 payment cards had potentially been compromised.

These cards had all been used to pay for Avios redemptions between 21st April and 28th July.

Only online bookings at ba.com were impacted.  Redemptions made via the British Airways app or call centre are safe.

Note that ALL forms of Avios redemption appear to be impacted.  You are included if you used Avios to part-pay for a car rental or hotel booking, according to BA.

It is important to note that this is 185,000 ADDITIONAL payment cards which are affected.  British Airways seems to have massaged the headline figure by stripping out cards which were also caught up in the first data breach.

The full statement is here.

The latest disclosure is broken down as follows:

77,000 payment cards have had their name, billing address, email address, payment number, expiry and CVV potentially compromised

108,000 payment cards have been similarly compromised but without the CVV number

You will receive an email during Friday if you are impacted.  According to BA:

“While we do not have conclusive evidence that the data was removed from British Airways’ systems, we are taking a prudent approach in notifying potentially affected customers, advising them to contact their bank or card provider as a precaution.”

On the upside, further investigation by British Airways into the original data breach last month has found that ‘only’ 244,000 payment cards have been compromised compared with the 380,000 figure originally claimed.

And, of course, Cathay Pacific revealed on Thursday that a whopping 9.4m sets of personal records had been unlawfully accessed.  This includes credit card data.

In some ways, this breach could be worse for BA than the original.  185,000 people represents a high percentage of the active British Airways Executive Club base.  The original breach will have caught up a lot of ‘once a year’ flyers whilst this one will be impacting people like us who make up a disproportionate part of BA revenue.  Anyone who has already sat through the 2017 weekend IT failure and the recent failures of the new FLY check-in system will probably have had enough by now.

You can find the latest BA statement on this latest breach here.

PS.  Having now seen the British Airways email, the heading “Update on Theft of Customer Data” is hugely misleading in my opinion and may lead to the email being deleted unread.


How to earn Avios from UK credit cards

How to earn Avios from UK credit cards (April 2024)

As a reminder, there are various ways of earning Avios points from UK credit cards.  Many cards also have generous sign-up bonuses!

In February 2022, Barclaycard launched two exciting new Barclaycard Avios Mastercard cards with a bonus of up to 25,000 Avios. You can apply here.

You qualify for the bonus on these cards even if you have a British Airways American Express card:

Barclaycard Avios Plus card

Barclaycard Avios Plus Mastercard

Get 25,000 Avios for signing up and an upgrade voucher at £10,000 Read our full review

Barclaycard Avios card

Barclaycard Avios Mastercard

5,000 Avios for signing up and an upgrade voucher at £20,000 Read our full review

There are two official British Airways American Express cards with attractive sign-up bonuses:

British Airways American Express Premium Plus

25,000 Avios and the famous annual 2-4-1 voucher Read our full review

British Airways American Express

5,000 Avios for signing up and an Economy 2-4-1 voucher for spending £15,000 Read our full review

You can also get generous sign-up bonuses by applying for American Express cards which earn Membership Rewards points. These points convert at 1:1 into Avios.

American Express Preferred Rewards Gold

Your best beginner’s card – 20,000 points, FREE for a year & four airport lounge passes Read our full review

The Platinum Card from American Express

40,000 bonus points and a huge range of valuable benefits – for a fee Read our full review

Run your own business?

We recommend Capital on Tap for limited companies. You earn 1 Avios per £1 which is impressive for a Visa card, along with a sign-up bonus worth 10,500 Avios.

Capital on Tap Business Rewards Visa

Huge 30,000 points bonus until 12th May 2024 Read our full review

You should also consider the British Airways Accelerating Business credit card. This is open to sole traders as well as limited companies and has a 30,000 Avios sign-up bonus.

British Airways Accelerating Business American Express

30,000 Avios sign-up bonus – plus annual bonuses of up to 30,000 Avios Read our full review

There are also generous bonuses on the two American Express Business cards, with the points converting at 1:1 into Avios. These cards are open to sole traders as well as limited companies.

American Express Business Platinum

40,000 points sign-up bonus and an annual £200 Amex Travel credit Read our full review

American Express Business Gold

20,000 points sign-up bonus and FREE for a year Read our full review

Click here to read our detailed summary of all UK credit cards which earn Avios. This includes both personal and small business cards.

Comments (251)

This article is closed to new comments. Feel free to ask your question in the HfP forums.

  • RussellH says:

    IAG Shares currently up 3%, while the FTSE is down 1.5%. Some people, somewhere, do not seem to see this as significant!

    • TM says:

      But shareholders see it exactly as it is, IAG were trying to maximise income for them. So the share price will go up.

      Same thing happened when Barclays were fined for the LIBOR fixing, share price rose.

  • Prins Polo says:

    Same here. I saw it’s an “update” so didn’t even open the email from BA (as I wasn’t affected by the original breach) until I read this article on HfP!

  • Keith says:

    So maybe a disgruntled ex-employee if data is not being sold? If so, first, I hope he or she gets away with it. Second, I hope BA get the full 3% fine. It will contribute to their quicker implosion.

    • Shoestring says:

      Why do you want our National Airline to suffer just because someone evil hacked your data and eet’s led by Señor Rolipoli Feckweet?

      Give them a chance.

      • Stoneman says:

        What makes you think BA is the national airline? It is a private business and operates as such. If it were a national carrier then it would probably be forced to serve the regional airports a little better then it currently does.

  • Thomas Howard says:

    The problem with IAG/BA and their relentless penny pinching with cleaning, baggage, onboard beverages, general outsourcing and other things low down on the list of concerns is that in the mind of the consumer it could become a proxy for things they do care about like safety and physical security. They’re one unfortunate accident, or additional runway capacity/competition away from their deathbed.

    • Shoestring says:

      Even the airlines on death row (eg Alitalia) don’t compromise on maintenance.

      Though 23 Italian public transport coaches in Rome have burst into flames & burned to the ground this year because they didn’t change the oil.

      • Thomas Howard says:

        I accept what you’re saying but most people don’t fear buses in the way some people do planes, and I’m talking about perception rather than reality. You don’t fly BA because its great quality and you don’t fly BA because its cheap, its starting to fall between two stools. If they didn’t have about 50% of the landing slots at Heathrow I think they’d be in trouble.

  • swintonowl says:

    I wasnt affected first time but have had 2 emails this time with the same apology and a code to register for the free experian credit services (a different code on each email).

  • mundo perdito says:

    I got the BA craftily worded email which, buried in the copy did say I had bought one redemption ticket which could put all my Amex details at risk. It was only when Amex emailed my that I realised this is a NEW alert, not just more info.

    So the real jewel in the crown is when you wish to avail of BA’s ‘generous’ offer to have 12 months free subscription to Experian ProtectMyID. It’s only partially free and they take your CC details in order to do an autorenew when your ‘free’ period is over.

  • Peter says:

    I got this second email, not the one last time.
    The only flight I booked with BA this year was a redemption flight.
    Their email is absolutely useless, they could have at least included the card that got compromised. After looking for the confirmation, it turns out I paid via PayPal, which mean they cant have my card after all – crucial information they are withholding in their email.
    They really deserve a massive fine just for how that email is written and how useless and generic the content is!

    • Anthony says:

      I agree with every word. Took me ages to find which bookings could have been affected and quite by chance I used PayPal on the only avios reception I made during that period.

      So the email BA have sent out is not only unhelpful, it is actually downright misleading.

  • Shoestring says:

    O/T I’m afraid I just did a Genghis rational choice on the site that cannot be named.

    I normally like to get ‘free’ Avios even though I know the argument about cash being better when it’s only 1.05p/ point.

    But these days they’re running 8% bonus on prepaid Mastercard, which sort of swung it vs a mere 5% bonus (premium member) & ‘free’ reward flights/ Avios.

    You just have to remember to spend it. Easily done – comes through next day in your email a/c and you can use it all up immediately eg on your BT bill.

    • Shoestring says:

      Sorry. checking the math, something like 0.95p/ point.

    • Genghis says:

      Just occasionally, cash is king. Although this is head for points, the points don’t operate in a vacuum so need to be compared to the “real world”. Not used the prepaid cards yet. Not had any reasonable cash back for a while and hotels.com (my main earner) cannot be converted to the wallet. Let us know how you get on

      • Shoestring says:

        I didn’t have a choice last week & tried it for the first time (no other payout options allowed that time). It was 100% hassle free, as it happens I just put £200 of credit on my son’s school lunch account with Wisepay but it could equally have been BT bill – Wisepay only took round £50s so I used the change on BT.

        I realised the only way you lose is by keeping your money on the virtual card and forgetting about it/ forgetting access details, so made sure to use it all up straight away.

This article is closed to new comments. Feel free to ask your question in the HfP forums.

The UK's biggest frequent flyer website uses cookies, which you can block via your browser settings. Continuing implies your consent to this policy. Our privacy policy is here.