, , ,

What’s happening in the British Airways data breach group action?

BA data breach

Last year, almost 400,000 British Airways customers had their bank card details stolen in one of the most severe cyber-attacks in UK history. In response, our expert data breach solicitors are preparing to launch a British Airways data breach group action once the relevant investigations are complete.

What happened in this case?

British Airways has apologised after admitting that its customers’ details were stolen over a period of 15 days in a massive data breach. The attack put the personal and financial information of customers making bookings at risk. In total, about 380,000 transactions were affected.

We could be talking about one of the most serious data breach cases to hit the UK, so we quickly began to receive enquiries from concerned passengers.

Where are we up to?

We are currently preparing to launch a British Airways data breach group action. A group action is undoubtedly the best way forward for data breach claims of this nature. It allows people with the same type of claim to bring it together on a collective basis to strengthen their overall position and increase their chances of success.

We have also sent a ‘Letter of Claim’ to BA and their solicitors. This shows them that we are serious about pursuing potential litigation on behalf of our clients.

We have also met with other solicitors who are also pursuing claims against BA for the data breach. We believe that a joined-up approach with these solicitors will allow us to proceed on a similar footing with the other claimants, and maximise our chances of success.

Why claim against a victim of a cyber-attack?

It’s true that cybercriminals carried out a “sophisticated, malicious criminal attack” on the British Airways website.

But this doesn’t let BA off the hook. These hackers spent more than two weeks accessing data online before the hack was spotted and reported. This increases the risk substantially. So it’s unlikely that

BA did everything in its power to protect your data or had secure security processes and procedures in place.

The reality is that in most cases, data breaches happen because of a failure to implement reasonable and robust processes. So claiming compensation isn’t just in your best interests, the only way these organisations will be persuaded to take their responsibilities seriously and make the necessary improvements is by hurting their bottom line.

What should you do if you are worried?

For anyone worried that their data has been exposed by British Airways, you should:

  1. Determine what was stolen. To protect yourself as much as possible you need to know what kind of information was accessed in the data breach. British Airways should be able to advise you on this
  2. Contact your bank. If any financial information has been stolen, contact your bank or credit card provider immediately and explain that your account is at risk of fraud. As well as issuing a new card, the bank should be able to advise you if it detects suspicious activity on your account
  3. Change your passwords. If an online account (such as an email address) has been compromised, change the password right away. You should also change all other accounts that use the same password, and – if your email could be compromised – any accounts that could be accessed via your email. To keep you safe in the future, create a secure, unique password for each account (you might want to consider using a password manager to do this for you)
  4. Deploy additional security measures. If an app or website offers two-factor authentication to protect an account, use it
  5. Be vigilant. Beware of scammers using your stolen data against you. For example, don’t click on any links in emails asserting to be from your bank and always use the numbers they provide on their website if they ask to talk to you
  6. Sign up for a credit and/or identity-monitoring service. This will help you to monitor your financial accounts and sensitive personal information. Many organisations will offer such services free following a data breach but it’s important to check the small print. Be careful that in accepting any offer you are not giving away your rights to pursue a separate data breach compensation claim at a later date
  7. Keep a record. Make a list of all the accounts that could have been accessed and note down why you are concerned about them
  8. Inform the Information Commissioner’s Office (ICO) about your concerns. At present, the ICO is investigating the British Airways data breach. While it does not award compensation, if the ICO believes that the organisation in question broke the law, you can use this information in court to help prove your claim
  9. Contact Hayes Connor Solicitors ASAP. We’ll ensure that you are fully informed on this matter and will notify you about the investigation and your legal rights when making a claim.

To join our British Airways data breach group action compensation claim, you will need you to register with us. We’ll let you know what is happening in this case and if and when you can make a data breach compensation claim.