BA data breach

https://www.britishairways.com/en-gb/in ... nformation?

So it looks like I’ve booked a flight during the period concerned. According to their page, it says they will contact affected customers but then goes on to say (multiple times) contact your bank if you believe you have been affected.

Does their definition of affected mean, booking a flight or seeing suspicious activity on your card ?

Only booked the flight down to London yesterday but also reserved a fare with a deposit for November a few days earlier.

Anyone any thoughts ?

Thanks

David

[mitchja]

As it mentions financial details where breached, I wouldn't wait to be contacted by BA and I'd be speaking to my bank and canceling the payment card used. Better to be safe than sorry. They should be able to get a new one out to you pretty quickly.

Unfortunately affected by this on my LGW-KIN booking but as I wasn't wise enough to be on V-Flyer last night I missed this alert posted by David

Got an email from BA at 02:48 this morning that I saw at around 10am advising of the issue (see below) but obviously my bank's telephone lines were swamped by the time I tried them this morning (so after a 45 minute wait I just gave up and used online banking to effectively report card 'lost or stolen' so that it gets cancelled immediately and a new one sent out)

Luckily no unusual transactions on my account at the time so hopefully will be in the clear but I think I'll still try the bank later to see if I can get through (but I wasn't going to keep waiting this morning without taking action by cancelling card online at least).

Dear Customer,





From 22:58 BST 21 August 2018 until 21:45 BST 5 September 2018 inclusive, the personal and financial details of customers making or changing bookings at ba.com, and on our app were compromised. The stolen data did not include travel or passport information.



The breach has been resolved and our website is working normally.



We’re deeply sorry, but you may have been affected. We recommend that you contact your bank or credit card provider and follow their recommended advice.



We take the protection of your personal information very seriously. Please accept our deepest apologies for the worry and inconvenience that this criminal activity has caused.



Further information can be found at ba.com.



Yours sincerely,





AlexCruzSignature

Alex Cruz

Chief Executive Officer

I know we all like a joke/grumble about the shortcomings of VS’s IT but with the meltdown last year and now this, it looks positively robust compared to BA’s!

I also booked some flights during that period. First saw about the breach of software last night in the news, but an email did arrive overnight about it. I’ve called about it four times this morning, and get an automated message to basically say that no customers will be liable for any fraudulent transactions, and that there is nothing customers need to be doing at the moment. I’m paraphrasing slightly, but that’s the gist of it. And then th call cuts off!

I would have assumed they would want to cancel existing credit cards - and wonder if this is a holding message as the numbers involved are so big. Have checked my card account and will continue to do so. But I still feel uneasy and would refer them to cancel our current cards and issue new ones.

Unfortunately affected by this on my LGW-KIN booking but as I wasn't wise enough to be on V-Flyer last night I missed this alert posted by David

Got an email from BA at 02:48 this morning that I saw at around 10am advising of the issue (see below) but obviously my bank's telephone lines were swamped by the time I tried them this morning (so after a 45 minute wait I just gave up and used online banking to effectively report card 'lost or stolen' so that it gets cancelled immediately and a new one sent out)

Luckily no unusual transactions on my account at the time so hopefully will be in the clear but I think I'll still try the bank later to see if I can get through (but I wasn't going to keep waiting this morning without taking action by cancelling card online at least.

I can’t see a way of cancelling cards online - the link directs to a phone number!

[mitchja]

In most cases, you will need to speak to your card issuer to cancel / re-issue cards.

For AmEx (so I guess the BA version as well) you can request a new card online via the 'Account Management' section once logged into your account. Use the lost card option which will immediately stop your current card and issue you a new card with a new number / new CVV.

I can't see anyway to do this via the AmEx app though?

I can’t see a way of cancelling cards online - the link directs to a phone number!

I guess it depends on whether you have the problem on a debit or a credit card and what your provider has as an online offering options - in my case it was a bank debit card and on their 'cards' tab there are options to request a replacement card for one that is damaged (this probably won't immediately cancel the existing card?) and to report a lost or stolen card (which does immediately cancel the existing card so that's the one I chose).

Maybe best to choose help/support and look for 'lost or stolen card' to see if in the help they give a choice of either reporting by phone or reporting online …. as although the physical card isn't lost or stolen I believe BA are saying the card details have been stolen so effectively that's what you would want the card provider to react to (i.e. cancel the existing card and issue a new one with new ccv etc).…. as James suggested above.

It all looks a bit messy. The general concensous from Amex is they won’t replace your card unless you specifically ask but will monitor the account for suspicious transactions but I’ve just received a text from Barclaycard to say I can’t use my card online but it can still be used in shops and a replacement will be with you shortly.

FWIW, the barclaycard had a £5 deposit transaction with BA but my Amex had a much larger transaction on it with BA - a little confusing.

David.

[mitchja]

Looks like AmEx are sending out generic emails to everyone as well about this, as I just got the following (I just have a standard none-BA version of the AmEx card here):

Dear Cardmember,
I'm writing to you about the reported British Airways data breach involving personal and financial details of customers being compromised through their web and mobile app.

We want to assure you we have industry-leading fraud protection technology that is continually monitoring for any suspicious activity in order to safeguard you. Also, our Cardmembers are never liable for any fraudulent charges on their Accounts. If you have used your American Express Card to book with British Airways, we are monitoring your Account for you.

There is no action you need to take – we will contact you immediately if there's any unusual activity with your Account. In the meantime you can continue to use your Card as normal.

If we see any unusual activity which could be fraud, we will contact you immediately. For added protection, you can also sign up for free fraud and other Account activity notifications via email, SMS text messaging, or alerts through our app.
Thank you for your continued Cardmembership.

Yours sincerely,
Charlotte Duerden
Country Manager, American Express UK

David

As you say the transactions are strange are they both fictious? If they are then the Barclaycard one is classic as thieves will often use a card for a small transaction to test whether or not it has been reported and stopped. As James recommends cancel and get new ones.

David