First fine after introduction of the GDPR in the UK hits British Airways

Date: 08.07.2019

Responsible body: British Airways

Type of data breach: personal data were stolen

First fine after the introduction of the GDPR in the UK hits British Airways. In the summer of 2018, customer data was allegedly redirected from the British Airways website to a site run by the fraudsters. In the process individual-related data such as credit card and address data may have been stolen. According to the authorities, around 500,000 customers were affected due to "weak security precautions".

Categories of data concerned: Travel data, credit card data, identity card data, passport data

Legal classification: British Airways has reported the data breach itself

Country: Great Britain

Fines: 183.39 million British pounds (just under 205 million euros)

Source: Mirror

Back to the overview of the data breaches