, , ,

Why should you claim compensation for the British Airways data breach

british airways data breach

In 2018, almost 400,000 British Airways customers had their bank card details stolen in what is being called one of the most severe cyber-attacks in UK history. In response, the airline is now facing legal action from thousands of people in the UK. As expert data breach solicitors, here at Hayes Connor, we launched a British Airways Data Breach Group Action to help victims of this breach claim compensation. But since then, two more data breaches were uncovered at the airline.

What happened in the 2018 BA data breach?

Cybercriminals carried out a “sophisticated, malicious criminal attack” on the British Airways website. This attack has put the personal and financial details of customers making bookings at risk. In total, about 380,000 transactions were affected.

Along with the financial info stolen, the hackers also gained access to personally identifiable information (PII). If this information gets into the wrong hands, it can be used to undertake identity and financial fraud.

British Airways admitted that the cybercriminals spent more than two weeks accessing data online before the hack was spotted and reported. This increases the risk substantially.

A second BA data breach

To make matters worse, when investigating this case, a second data breach was uncovered. In this instance, 77,000 people had their names, addresses, email addresses and detailed payment information taken. This included card numbers, expiry dates, and card verification value (CVV) numbers

What happened in the 2019 BA data breach?

In the latest British Airways data breach, researchers at security firm Wandera uncovered unencrypted links within BA’s e-ticketing process. Furthermore, they have warned that this vulnerability means that attackers could easily intercept these links. This means that they could access and change the flight booking details and personal information of passengers.

The vulnerability with British Airway’s e-ticketing system may have also exposed sensitive passenger information.

Should you accept compensation from British Airways?

After the first data breach was uncovered, British Airways said that compensation claims would be discussed on an ‘individual basis’. However, it is not up to the airline to dictate the terms of any compensation payments.

At Hayes Connor Solicitors, we are experts in data breach cases, and, once you have registered with us, it’s not uncommon that we uncover information that allows us to increase the value of your claim significantly. What might seem irrelevant to you, could make a huge difference in the eyes of the law. That’s why it’s important not to be fobbed off by a low initial offer from British Airways. Instead, by making a no-win, no-fee claim with us, we can increase the amount of compensation you receive substantially.

Why launch a group action?

A group action is undoubtedly the best way forward for data breach claims of this nature. It allows people with the same type of claim in principle to bring it together on a collective basis to strengthen their overall position and increase their chances of settlement or success in litigation.

Find out more about group actions.

What should you do now?

For anyone worried that their data has been exposed by British Airways, you should:

  1. Determine what was stolen. To protect yourself as much as possible you need to know what kind of information was accessed in the data breach. British Airways should be able to advise you on this
  2. Contact your bank. If any financial information has been stolen, contact your bank or credit card provider immediately and explain that your account is at risk of fraud. As well as issuing a new card, the bank should be able to advise you if it detects suspicious activity on your account
  3. Change your passwords. If an online account (such as an email address) has been compromised, change the password right away. You should also change all other accounts that use the same password, and – if your email could be compromised – any accounts that could be accessed via your email. To keep you safe in the future, create a secure, unique password for each account (you might want to consider using a password manager to do this for you)
  4. Deploy additional security measures. If an app or website offers two-factor authentication to protect an account, use it
  5. Be vigilant. Beware of scammers using your stolen data against you. For example, don’t click on any links in emails asserting to be from your bank and always use the numbers they provide on their website if they ask to talk to you
  6. Sign up for a credit and/or identity-monitoring service. This will help you to monitor your financial accounts and sensitive personal information. Many organisations will offer such services free following a data breach but it’s important to check the small print. Be careful that in accepting any offer you are not giving away your rights to pursue a separate data breach compensation claim at a later date
  7. Keep a record. Make a list of all the accounts that could have been accessed and note down why you are concerned about them
  8. Inform the Information Commissioner’s Office (ICO) about your concerns. At present the ICO is undertaking an investigation into the British Airways Data Breaches. While it does not award compensation, if the ICO believes that the organisation in question broke the law, you can use this information in court to help prove your claim
  9. Contact Hayes Connor Solicitors ASAP. We’ll ensure that you are fully informed on this matter and will notify you about the investigation and your legal rights when making a claim.

Data breaches often have severe consequences for those affected. And crucially, it doesn’t matter if you haven’t lost out financially or have suffered emotionally as a result of the hack. If an organisation has failed to protect your personal data, you have a right to claim compensation. Even if you haven’t suffered as a result.

Furthermore, because we offer no-win, no-fee funding arrangements, you have nothing to lose.

Find out more about no-win, no-fee.

in our British Airways data breach group action compensation claims, you will need you to register with us. We’ll let you know what is happening in this case and if and when you can make a data breach compensation claim.