British Airways
2 breaches430K affected in allTransportbritishairways.com
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Staff payroll data including bank details taken in Zellis MOVEit breachJun 5, 20233 years agoVendor breachUnverified | Jun 5, 20233 years ago | Vendor breach | Transport | Unverified | Unknown |
| 2018 web skimming attack exposed over 400,000 customers; ICO fine of GBP 20MSep 6, 20188 years agoHacking | Sep 6, 20188 years ago | Hacking | Transport | Settled | 430K |
About
Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.
- 2026-09-25 · British Airways, 2018-09-06 · data_types: ["names","addresses","payment-card","emails","credentials","financial"]
- 2026-09-25 · British Airways, 2018-09-06 · source: https://www.maine.gov/ag/sites/maine.gov.ag/files/docs/Data%20breach%20spreadsheet%208-1-2021%20through%2012-5-2018%20REDACTED.xlsx
- 2026-09-25 · British Airways, 2018-09-06 · source: https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-date-Report-2018.pdf
- 2026-09-25 · British Airways, 2018-09-06 · fine_usd: 25800000
- 2026-09-25 · British Airways, 2018-09-06 · lawsuit: GBP 20M ICO fine (Oct 2020), reduced from a proposed GBP 183.39M
- 2026-09-25 · British Airways, 2018-09-06 · data_types: ["names","addresses","payment-card","emails","credentials"]
- 2026-09-25 · British Airways, 2018-09-06 · summary: Using credentials stolen from a Swissport employee, an attacker entered BA's network in June 2018 and later injected 22 lines of JavaScript into its website to skim payment details from late August to September 5, 2018. The ICO first propos
- 2026-09-25 · British Airways, 2018-09-06 · title: 2018 web skimming attack exposed over 400,000 customers; ICO fine of GBP 20M
- 2026-09-25 · British Airways, 2018-09-06 · status: settled
- 2026-09-25 · British Airways, 2018-09-06 · fine_usd: 26000000
- 2026-09-25 · British Airways, 2018-09-06 · lawsuit: 20M GBP ICO fine (2020)
- 2026-09-25 · British Airways, 2018-09-06 · data_types: ["names","addresses","payment-card","emails"]
- 2026-09-25 · British Airways, 2018-09-06 · records_basis: organization
- 2026-09-25 · British Airways, 2018-09-06 · records: 429612
- 2026-09-25 · British Airways, 2018-09-06 · disclosed: 2018-09-06
- 2026-09-25 · British Airways, 2018-09-06 · summary: British Airways said payment data from about 380,000 transactions on its website and app was stolen between August 21 and September 5, 2018. The ICO fined it 20 million GBP for a breach affecting more than 400,000 customers.
- 2026-09-25 · British Airways, 2018-09-06 · title: Card skimming script on BA website and app hits hundreds of thousands
- 2026-09-25 · British Airways, 2023-06-05 · added
- 2026-09-25 · British Airways · domain: britishairways.com
- 2026-09-25 · British Airways, 2018-09-06 · attack: hacking
- 2026-09-25 · British Airways, 2018-09-06 · discovered: 2018-09-05
- 2026-09-25 · British Airways, 2018-09-06 · added
- 2026-09-25 · British Airways · added