British Airways Website and Mobile App Suffer Huge Customer Data Breach

[MacRumors]

British Airways says it is investigating the theft of customer data from its website and mobile app over a two-week period, during which 380,000 payment cards were exposed (via The Guardian).

"From 22:58 BST August 21 2018 until 21:45 BST September 5 2018 inclusive, the personal and financial details of customers making bookings on our website and app were compromised," the airline revealed in a statement on its website.

According to BA, travel and passport information was not accessed during the data breach, but concerned customers are being advised to get in touch with their card issuers in the first instance. The company said all customers affected by the breach had been contacted on Thursday night.

"British Airways is communicating with affected customers and we advise any customers who believe they may have been affected by this incident to contact their banks or credit card providers and follow their recommended advice."

The airline said it was informed of the hacking by a third party, which is why it was able to continue undetected for two weeks, but the company insists that the breach has been resolved and its website and mobile app are now working normally.

Article Link: British Airways Website and Mobile App Suffer Huge Customer Data Breach

 

[ivan86]

Weaker encryption and backdoors are the answer.

 

[vmistery]

Hardly a surprise after last years IT fiasco, they clearly have no decent IT strategy for a company of their size and complexity. Now it seems they are bringing in IBM to help out with security so they must be fairly desperate

 

[JackieInCo]

Oh, another one.

 

[Jarman74]

Here's another huge data breach any government would not hesitate to recklessly dismiss and shrug off. You would bet British Airways was telling its customers their data was bulletproof thanks to some state of the art tech before this breach, yet they are exactly the ones who will have to pay the price while BA hides itself behind some corporate speak BS apology.

As a long time Apple customer who has been feeling pretty disappointed by quite a few of the latest design choices, I still wholeheartedly recommend Apple products to anyone for its (truly) courageous stance on privacy matters.

 

[TheSourceOfTruth]

wow!

 

[bikeoid]

"The airline said it was informed of the hacking by a third party, which is why it was able to continue undetected for two weeks"

Because we don't listen to third party reports, and it took our own people two weeks to find what they found.

 

[DipDog3]

Thanks to the lack of security from many companies and governments, all of my personal info is already on the dark web. I guess one more breach doesn’t make much difference.

 

[Veinticinco]

Frankly, if you choose to fly with BA, you expect and deserve to have your data breached.

Almost 15 years on from the last flight of Concorde, it's now one of the worst airlines in every aspect.

 

[960design]

Does anyone know what backend were they using? Custom? MBaaS?

 

[TheSourceOfTruth]

Frankly, if you choose to fly with BA, you expect and deserve to have your data breached.

Almost 15 years on from the last flight of Concorde, it's now one of the worst airlines in every aspect.

Why is it one of the worst airlines?