Thanks Thanks:  0
Likes Likes:  9
Results 1 to 6 of 6

Topic: BA fined 20m over data hack

  1. #1
    Join Date
    Mar 2007
    Location
    Northern England
    Posts
    13,549
    Mentioned
    0 Post(s)

    Default BA fined 20m over data hack

    From today's TravelMole, another cash flow issue for BA. Not saying they shouldn't be fined, but not a great time for it.

    Having said that, I'm always surprised at how big companies get caught out like this which is often down to not patching the server OS.

    BA fined 20m over data hack

    British Airways has been fined 20 million by the Information Commissioner's Office for failing to protect the personal and financial details of more than 400,000 of its customers.

    The ICO said the fine was its 'biggest to date', although it's just a fraction of the ICO's 183m intention to fine that was issued in June 2019 - an amount that would have been equivalent to 1.5% of BA's global annual turnover. At the time BA said it was surprised at the size of the intended fine and would appeal.

    That appeal and the economic impact of the coronavirus pandemic, appears to have paid off.

    "As part of the regulatory process the ICO considered both representations from BA and the economic impact of Covid-19 on their business before setting a final penalty," the ICO said.

    An ICO investigation found the airline was processing a significant amount of personal data without adequate security measures in place. This failure broke data protection law and, subsequently, BA was the subject of a cyber-attack during 2018, which it did not detect for more than two months.

    ICO investigators found BA ought to have identified weaknesses in its security and resolved them with security measures that were available at the time.

    Addressing these security issues would have prevented the 2018 cyber-attack being carried out in this way, investigators concluded.

    Information Commissioner Elizabeth Denham said: "People entrusted their personal details to BA and BA failed to take adequate measures to keep those details secure.

    "Their failure to act was unacceptable and affected hundreds of thousands of people, which may have caused some anxiety and distress as a result. That's why we have issued BA with a 20m fine - our biggest to date.

    "When organisations take poor decisions around people's personal data, that can have a real impact on people's lives. The law now gives us the tools to encourage businesses to make better decisions about data, including investing in up-to-date security."
    91/92/95HI MGE;97NYC/Cali/Ariz/Chicago;98St.Petes Bch/Hyatt K'mee;00C'water Bch/Dixie Landings;02South'n Dunes;05Ft.Myers/Keys/Ft Lauderdale/BW LBV;06Indian Ridge;07Ind. Ridge;08Sanibel/Ind. Ridge;09Sarasota/Ind. Ridge;10Sanibel/Ind. Ridge;11Ind. Ridge;12Sanibel/West Haven;13West Haven;14Sanibel/West Haven;15Sanibel/West Haven;15West Haven;16Panhandle tour/Ashley Manor;16Loma Linda;17Sanibel/Loma Vista;18Gulf Coast/St Ag/West Haven;19Sanibel/Venice Beach/West Haven

  2. #2
    Join Date
    Jan 2005
    Location
    Orlando!
    Posts
    18,326
    Mentioned
    0 Post(s)

    Default

    It never rains, but it pours. I know data breaches can happen even to good companies, but you have to think there is a lot of karma coming home to roost with BA...

  3. #3
    Join Date
    Sep 2007
    Location
    Gloucester, UK
    Posts
    6,259
    Mentioned
    0 Post(s)

    Default

    That's the last thing they need right now and it's the customer who ends up paying anyway.

  4. #4
    Join Date
    Jan 2005
    Location
    Orlando!
    Posts
    18,326
    Mentioned
    0 Post(s)

    Default

    Yes, and somehow the people actually responsible for the bad management still get their bonuses, don't they

  5. #5
    Join Date
    Jan 2006
    Location
    Northampton
    Posts
    4,112
    Mentioned
    0 Post(s)

    Default

    These fines need to go to the individuals responsible, not the company. If suddenly the CIO was looking at a 20Million fine you can bet the overtime to do the relevant patches overnight would have been approved very quickly.
    7 Trips to Florida, Christmas in LA, Disneyland Paris twice and odd days here and there.
    All my trip reports are now HERE.

  6. #6
    Join Date
    Jan 2005
    Location
    Orlando!
    Posts
    18,326
    Mentioned
    0 Post(s)

    Default

    Or make it a cause for instant dismissal, with none of the golden wheelbarrows these people often get!

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •