BA to appeal multi-million pound data breach fine
British Airways is expected to appeal a fine of over £183 million for last year’s customer data breach.
The Information Commissioner’s Office (ICO) said it intends to implement the penalty against BA parent International Airlines Group (IAG) over the theft of data from its web and mobile site, which hit 380,000 direct customer transactions, although around 500,000 passengers are believed to have been affected in total.
The record fine is equivalent to 1.5% of BA’s worldwide turnover and is the biggest penalty notice to be issued under the UK’s Data Protection Act.
BA chairman and CEO Alex Cruz said: "We are surprised and disappointed in this initial finding from the ICO. British Airways responded quickly to a criminal act to steal customers’ data.
"We have found no evidence of fraud/fraudulent activity on accounts linked to the theft."
IAG chief executive Willie Walsh said it would defend BA’s position ‘vigorously’ and would appeal.
He said: "British Airways will be making representations to the ICO in relation to the proposed fine.
"We intend to take all appropriate steps to defend the airline’s position vigorously, including making any necessary appeals."
Details of the data breach were revealed in September 2018, when BA announced it had been hit by the cyber attack that had compromised passenger details between August 21 and September 5. But the ICO said the hack is believed to have begun in June, when customer details were harvested after hackers diverted user traffic to a false site.
"Personal data of approximately 500,000 customers were compromised in this incident, which is believed to have begun in June 2018," the ICO said.
It added: "The ICO’s investigation has found that a variety of information was compromised by poor security arrangements at the company, including log in, payment card, and travel booking details as well name and address information."
Information commissioner Elizabeth Denham said: "People’s personal data is just that – personal. When an organisation fails to protect it from loss, damage or theft it is more than an inconvenience.
"BA has co-operated with the ICO investigation and has made improvements to its security arrangements since these events came to light."
After the breach came to light, BA said it would pay out compensation for financial loss, including money stolen from bank accounts and a 12-month credit-rating monitoring service for those affected.
Lisa
Lisa joined Travel Weekly nearly 25 years ago as technology reporter and then sailed around the world for a couple of years as cruise correspondent, before becoming deputy editor. Now freelance, Lisa writes for various print and web publications, edits Corporate Traveller’s client magazine, Gateway, and works on the acclaimed Remembering Wildlife series of photography books, which raise awareness of nature’s most at-risk species and helps to fund their protection.
Vegas’s Billion-Dollar Secrets – What They Don’t Want Tourists to Know
Visit Florida’s New CEO Bryan Griffin Shares His Vision for State Tourism with Graham
Chicago’s Tourism Renaissance: Graham Interviews Kristin Reynolds of Choose Chicago
Graham Talks with Cassandra McCauley of MMGY NextFactor About the Latest Industry Research
Destination International’s Andreas Weissenborn: Research, Advocacy, and Destination Impact
Graham and Don Welsh Discuss the Success of Destinations International’s Annual Conference
Graham and CEO Andre Kiwitz on Ventura Travel’s UK Move and Recruitment for the Role
Brett Laiken and Graham Discuss Florida’s Tourism Momentum and Global Appeal
Graham and Elliot Ferguson on Positioning DC as a Cultural and Inclusive Global Destination
Graham Talks to Fraser Last About His England-to-Ireland Trek for Mental Health Awareness
Kathy Nelson Tells Graham About the Honour of Hosting the World Cup and Kansas City’s Future
Graham McKenzie on Sir Richie Richardson’s Dual Passion for Golf and His Homeland, Antigua
ADS PRO 
Airlines suspend Madagascar services following unrest and army revolt
Qatar Airways offers flexible payment options for European travellers
TAP Air Portugal to operate 29 flights due to strike on December 11
Air Mauritius reduces frequencies to Europe and Asia for the holiday season
Airbnb eyes a loyalty program but details remain under wraps