Law firm lands compensation for BA customers over 2018 data breach


British Airways has reached a settlement to resolve a class action lawsuit over a data breach in 2018 involving the personal and financial details of hundreds of thousands of customers.

The terms of the deal were kept confidential and the airline did not admit liability but it is understood claimants involved in the case brought by law firm PGMBM are to receive a payout.

It relates to an admission by the airline in September 2018 that customer details had been compromised by hackers in a data theft between 21 August and 5 September.

The number of people affected was later found to be 420,000 customers and staff.

Image: Customers were alerted to the breach in an email sent by the airline

Names, debit and credit card numbers, addresses and email addresses were among details exposed in the incident.

Advertisement

Some passengers were diverted to a fake website, which harvested their data.

A subsequent investigation by the Information Commissioner’s Office (ICO) found BA, at that time, was “processing a significant amount of personal data without adequate security measures in place”.

More from Business Ellesmere Port: Vauxhall plant’s future secured with electric vehicle production FTSE chiefs hold talks with China’s Premier in bid to thaw frosty relations COVID-19: Questions remain for businesses after PM announces scrapping of work-from-home order Ian King Business Podcast: Vauxhall at Ellesmere Port, Facebook helping business and an overheating housing market. Every COVID rule that’s set to change on ‘Freedom Day’ – from nightclubs to self-isolation and working from home COVID-19: Sainsbury’s and Ocado cheer sustained delivery growth despite pandemic easing

It recommended a fine of more than £180m though a sum of £20m was later imposed.

PGMBM had revealed in January that the airline could face customer claims totalling £800m – with payouts of up to £2,000 per person.

It had signed up 16,000 people to its claim against BA at that time.

The airline welcomed the settlement while Harris Pogust, PGMBM’s chairman, said: “We are very pleased to have come to a resolution on this matter after constructive mediation with British Airways.

“This represents an extremely positive and timely solution for those affected by the data incident.”