Just like any business, airlines must ensure that sensitive customer information is kept secure. But, for British Airways, customer privacy did not seem to be a priority after a series of data protection failures at the airline. Not exactly what you would expect from an airline with a reputation for high-class customer service.
In 2018, poor IT infrastructure caused a data privacy violation in which almost 400,000 British Airways customers had their bank card details stolen. This case is now one of the most severe cyber-attacks in UK history. When investigating this breach, a second data breach was uncovered. And, to make matters worse, in 2019 a vulnerability within British Airway’s e-ticketing system was also exposed.
Once known as the world’s favourite airline, British Airway’s reputation has been seriously damaged by these data protection failures.
Following an investigation into the 2018 data breach, British Airways was fined £20 million by the Information Commissioner’s Office (ICO). But this payment will not be used to compensate victims. In fact, any money received by the ICO goes back to the Treasury.
So, the only way victims of the British Airways data breach can get compensation for any harm and/or distress experienced is to take legal action against the airline.