ICO to Fine British Airways £183m for Infringements of GDPR

Following an extensive investigation the ICO has issued a notice of its intention to fine British Airways £183.39M for infringements of the General Data Protection Regulation (GDPR).


The ICO proposes to fine British Airways £183m for a "cyber incident" notified to them in September 2018.

Hackers diverted traffic from the British Airways website to a fraudulent site, where customer details were harvested.

Personal data including including log in, payment card, and travel booking details as well name and address information of approximately 500,000 customers were "compromised".


Further details here.