BA faces fine over data breach

British Airways is facing a fine of £183m (R3,2bn) from UK data privacy watchdog, the Information Commissioner’s Office (ICO), for last year’s data breach of its security systems.

The watchdog released a statement saying that it intended to fine the airline for infringements of the General Data Protection Regulation.

The 2008 data breach saw users of the airline’s website being diverted to a fraudulent site that resulted in the details of around 500 000 customers being stolen by hackers.

The ICO said stolen data included names, email addresses, credit card information such as credit card numbers, expiry dates and the three-digit CVV code found on the back of credit cards but did not include travel or passport details. It added that BA had co-operated with its investigation and had made improvements to its security arrangements.