Skip to main contentSkip to navigationSkip to navigation
A British Airways Boeing 747 comes in to land at Heathrow
British Airways says about 380,000 card payments on its website and app were compromised during a 15-day data breach. Photograph: Toby Melville/Reuters
British Airways says about 380,000 card payments on its website and app were compromised during a 15-day data breach. Photograph: Toby Melville/Reuters

British Airways data breach: what to do if you have been affected

This article is more than 5 years old

British Airways has warned customers that about 380,000 card payments on its website and app were compromised during a 15-day data breach. Here is what to do if you think you have been affected.

Which payments were affected?

BA says the breach relates to bookings made between 10.58pm on 21 August and 9.45pm on 5 September.

What data was compromised?

The airline says personal and financial details of customers making bookings over the period were compromised. No passport or travel details were stolen.

How did the hack happen?

The theft of customer data from British Airways’ website and app is one of the most serious to hit a UK company. Photograph: Andrew Brookes/Getty Images/Cultura RF

British Airways says it was not a breach of the airline’s encryption. “There were other methods, very sophisticated efforts, by criminals in obtaining our data,” BA’s chief executive, Álex Cruz, said. Some experts have speculated that the hackers carried out a digital version of card “skimming” by copying data as it was entered into the system during the purchasing process.

I made a booking then, what should I do?

BA said it was in the process of contacting all affected customers. The airline is advising those customers to contact their bank or card provider and follow their advice.

Will I be compensated?

BA says that any customers who lose out financially will be compensated.

Will I have to get a new card?

Some customers have complained of having to cancel cards as a result of the breach. The airline said affected customers should follow their bank or provider's recommended advice.

Should I change my password?

Alex Neill of the consumer group Which? said anyone concerned they could be at risk of fraud should consider changing their online passwords and monitor their bank and other online accounts. She also urged people to be wary of emails regarding the breach because scammers may try to take advantage of it.

I'm a BA customer but I did not book a ticket over the affected period

British Airways is in the process of contacting all affected customers. Photograph: Gareth Fuller/PA

The airline said the incident has been resolved and all systems are working normally. Customers due to travel can check in online as normal.

How about future bookings?

Future bookings will not be affected, BA said.

Q&A

Tell us: are you a BA customer and have you been affected?

Show

We would like to hear from you if you are a BA customer and think you may have been affected by this story. Have you been contacted by the airline or have you spoken with your bank about problems?

You can share your experiences by filling in this encrypted form – anonymously if you wish. You can also share your stories, photos and videos with the Guardian via WhatsApp by adding the contact +44(0)7867825056.

One of our journalists may be in touch and we will consider some of your responses in our reporting. You can read terms of service here.

Was this helpful?

More on this story

More on this story

  • BA customers' credit card details 'probably already for sale'

  • How did hackers manage to lift the details of BA customers?

  • BA chief pledges to compensate customers after data breach

  • British Airways customer data stolen from its website

Most viewed

Most viewed