British Airways

2 breaches430K affected in allTransportbritishairways.com

Staff payroll data including bank details taken in Zellis MOVEit breachVendor breach exposed names, government IDs, financial details and employment records.Vendor breachTransportGBUnverifiedJun 5, 2023 2018 web skimming attack exposed over 400,000 customers; ICO fine of GBP 20MHacking exposed names, addresses, payment cards, emails, credentials and tokens and financial details. Reported to the California AG.Hacking430K affectedTransportUSSep 6, 2018

About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages, the company profile.

data_types2026-09-25

British Airways, 2018-09-06["names","addresses","payment-card","emails","credentials","financial"]

source2026-09-25

British Airways, 2018-09-06https://www.maine.gov/ag/sites/maine.gov.ag/files/docs/Data%20breach%20spreadsheet%208-1-2021%20through%2012-5-2018%20REDACTED.xlsx

source2026-09-25

British Airways, 2018-09-06https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-date-Report-2018.pdf

fine_usd2026-09-25

British Airways, 2018-09-0625800000

lawsuit2026-09-25

British Airways, 2018-09-06GBP 20M ICO fine (Oct 2020), reduced from a proposed GBP 183.39M

data_types2026-09-25

British Airways, 2018-09-06["names","addresses","payment-card","emails","credentials"]

summary2026-09-25

British Airways, 2018-09-06Using credentials stolen from a Swissport employee, an attacker entered BA's network in June 2018 and later injected 22 lines of JavaScript into its website to skim payment details from late August to September 5, 2018. The ICO first propos

title2026-09-25

British Airways, 2018-09-062018 web skimming attack exposed over 400,000 customers; ICO fine of GBP 20M

status2026-09-25

British Airways, 2018-09-06settled

fine_usd2026-09-25

British Airways, 2018-09-0626000000

lawsuit2026-09-25

British Airways, 2018-09-0620M GBP ICO fine (2020)

data_types2026-09-25

British Airways, 2018-09-06["names","addresses","payment-card","emails"]

records_basis2026-09-25

British Airways, 2018-09-06organization

records2026-09-25

British Airways, 2018-09-06429612

disclosed2026-09-25

British Airways, 2018-09-062018-09-06

summary2026-09-25

British Airways, 2018-09-06British Airways said payment data from about 380,000 transactions on its website and app was stolen between August 21 and September 5, 2018. The ICO fined it 20 million GBP for a breach affecting more than 400,000 customers.

title2026-09-25

British Airways, 2018-09-06Card skimming script on BA website and app hits hundreds of thousands

Added2026-09-25

British Airways, 2023-06-05

domain2026-09-25

British Airwaysbritishairways.com

attack2026-09-25

British Airways, 2018-09-06hacking

discovered2026-09-25

British Airways, 2018-09-062018-09-05

Added2026-09-25

British Airways, 2018-09-06

Added2026-09-25

British Airways