British Airways Hacked With Details of 380,000 Cards Stolen

ronjor · Sep 6, 2018

By AFP on September 06, 2018

British Airways said Thursday that the personal and financial details of customers making bookings between August 21 and September 5 were stolen in a data breach involving 380,000 payment cards.
Click to expand...

ronjor · Sep 7, 2018

Revealed: British Airways was in talks with IBM on outsourcing security just before hack

By John Leyden 7 Sep 2018 at 16:20
El Reg leaked memo sent weeks before crooks swiped payment cards
Click to expand...

guest · Sep 11, 2018

British Airways breach was effected by Magecart attackers
September 11, 2018
https://www.helpnetsecurity.com/2018/09/11/british-airways-breach-magecart/

The British Airways breach was the work of a well-known criminal group dubbed Magecart, which managed to put payment card skimming code on the company’s website, says RiskIQ researcher Yonathan Klijnsma.

“What is interesting to note from the certificate the Magecart actors used is that it was issued on August 15th, which indicates they likely had access to the British Airways site before the reported start date of the attack on August 21st—possibly long before. Without visibility into its Internet-facing web assets, British Airways were not able to detect this compromise before it was too late,” he notes.

And since the BA mobile application loads content from the website, the skimming script worked to steal the info provided by mobile users.

British Airways has updated the page they set up to provide information to affected customers and confirmed that phone number information has not been impacted [...]
Click to expand...

guest · Oct 25, 2018

British Airways admits mega-breach hit additional 185,000 customers
October 25, 2018
https://www.theinquirer.net/inquire...-mega-breach-hit-185-000-additional-customers

In an updated statement released on Thursday, BA admitted that a further 185,000 customers may have been affected by the breach.

Its investigation, carried out with specialist cyber forensic investigators and the National Crime Agency, revealed that hackers "may have stolen" payment details, including CVV numbers, of an additional 77,000 customers.

In addition, BA said that its investigation shows know that fewer of the customers we originally announced were affected. Of the 380,000 payment card details announced, 244,000 had details stolen, and the airline says it has seen no verified cases of fraud.
Click to expand...

guest · Oct 29, 2018

Analysis of British Airways breach uncovers sophisticated techniques
October 29, 2018
https://betanews.com/2018/10/29/british-airways-breach-analysis/

The British Airways breach earlier this year affected around 380,000 customers and resulted in the theft of data including personal and financial details.

The threat research team at Securonix has taken an in-depth look at the breach and the Magecart threat actor behind it, to uncover how it was carried out and offer tips to mitigate and prevent future attacks.

The analysis finds that some versions of Magecart include special tripwire code that detects the use of development tools to view the source of the scripts, and reports back the IP address, browser, and timezone as well as some additional information about the system.

The researchers say there are three key monitoring areas that are important to increase chances of detecting similar attacks, namely web server content/FIM, endpoint logs, and SSL/TLS proxy logs.
Click to expand...

You can find out more and download the full report on the Securonix blog.
Click to expand...

ronjor · Nov 3, 2018

Lloyds replacing some debit cards after cyber-attacks

2 November 2018
Lloyds Banking Group has confirmed it is reissuing debit cards to customers affected by cyber-attacks on Ticketmaster and British Airways.
The bank has reissued debit cards to all customers that have made purchases on Ticketmaster's website.
Click to expand...

guest · Jul 8, 2019

UK data regulator threatens British Airways with 747-sized fine for massive personal data blurt
Half a million records lost? £183m GDPR fine lined up
July 8, 2019
https://www.theregister.co.uk/2019/07/08/ico_threatens_ba_with_huge_fine_for_huge_data_loss

The UK Information Commissioner's Office has warned BA it faces a whopping £183.39m following the theft of million customer records from its website and mobile app servers.

The breach hit almost 500,000 people. The ICO statement reveals the breach is believed to have started in June 2018, previous statements from BA said it began in late August. The data watchdog described the attack as diverting user traffic from BA's site to a fraudulent site.
BA and the other regulators now have 28 days to make representations to reduce the fine.

In response, the airline said it was disappointed in the fine because it cooperated fully and had found no evidence that the stolen cards were used. It said it would make representations and appeal the decision.
Click to expand...

ICO statement: Intention to fine British Airways £183.39m under GDPR for data breach

guest · Sep 13, 2019

Lawyers accuse BA of 'swerving responsibility' for data breach after time limit is imposed for compensation claims
September 12, 2019
https://www.telegraph.co.uk/news/20...erving-responsibility-data-breach-time-limit/

British Airways has been accused of "swerving responsibility" for a massive data breach by trying to limit compensation payouts for victims, lawyers claim.
Up to 600,000 customers were affected by the 2018 cyber attack after hackers managed to intercept the details of those who made bookings through the BA website, threatening their financial security.

The airline has now applied to launch its own class action for victims but it includes a 17-week time limit for claimants to join.
Lawyers branded the move “unprecedented” and warned the “cynical” action was designed to limit a potential £3bn payout to customers.
Click to expand...

guest · Oct 5, 2019

Over 500,000 passengers can sue British Airways over customer 'data breach
October 5, 2019
https://www.mirror.co.uk/news/uk-news/over-500000-flyers-can-sue-20465272

Up to 500,000 British Airways customers have been granted permission to launch compensation claims against the airline following a data breach.

The hack, discovered in September 2018, saw around half a million customers' personal details, including payment data and addresses, compromised, according to an Information Commissioners Office investigation.
There are currently more than 5,000 affected customers being represented by SPG Law and a further 230 represented by Your Lawyers Limited, who are bringing claims for compensation.

But the potential number of claimants is much larger and the judge granted a window of 15 months from the hearing on Friday for people to join the group litigation.
Click to expand...

guest · Oct 24, 2019

£4,000 bug bounty could have saved BA from record ICO fine
October 24, 2019
https://www.computerweekly.com/news...unty-could-have-saved-BA-from-record-ICO-fine

The £183.39m fine handed down by the Information Commissioner’s Office (ICO) to British Airways as a result of its August 2018 data breach could have been completely avoided if the airline had identified vulnerabilities in its system through responsible hacking or bug bounty programmes, according to security testing firm HackerOne.

HackerOne looked at four of the largest UK data breaches of recent years – BA, Carphone Warehouse, TicketMaster and TalkTalk – to draw its conclusions. It found that, based on the current market rates for bug bounty programmes, the four victims could have avoided fines totalling £265.4m for as little as £9,600 paid out in bounties.

“By running bug bounty programmes and asking hackers to find their weak spots, our customers have safely resolved over 120,000 vulnerabilities before a breach could occur. This research is a rough estimate [...] but it does highlight that companies can save millions and reduce risk by being proactive when it comes to identifying and patching their vulnerabilities.”
Click to expand...

ronjor · Oct 16, 2020

British Airways hit with UK data watchdog's biggest-ever fine

By Muvija M October 16, 2020
(Reuters) - Britain’s data protection watchdog said on Friday it has fined British Airways 20 million pounds - its biggest such penalty to date - for failing to protect data that left more than 400,000 of its customers’ details the subject of a 2018 cyber attack.
Click to expand...

guest · Jan 7, 2021

British Airways Plans £3bn Breach Settlement
January 6, 2021
https://www.infosecurity-magazine.com/news/british-airways-plans-3bn-breach/

The UK's flag-carrier airline is planning to begin settlement discussions that could see customers who became the victims of a data breach receive a compensation payout of up to £3bn.

British Airways customers were impacted by two data breaches in 2018. Between April and July 2018, some 185,000 British Airways reward-booking customers were notified that their personal information and financial details had been compromised, while a further 380,000 users of the airline’s app and website had their information exposed between August and September 2018.
Click to expand...

“News that British Airways wants to settle compensation claims, with negotiations set to take place in the first quarter of 2021, is acknowledgement of its wrongdoing in failing to protect customer data," said Aman Johal, director at Your Lawyers.
Click to expand...

Log in or Sign up

British Airways Hacked With Details of 380,000 Cards Stolen

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

Log in or Sign up

British Airways Hacked With Details of 380,000 Cards Stolen

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

Useful Searches