Get 40% Off
🤯 This Tech Portfolio is up 29% YTD! Join Now to Get April’s Top PicksGet The Picks – Just 99 USD

British Airways faces record 183.4 million pounds fine over data theft

Published 08/07/2019, 14:46
Updated 08/07/2019, 14:46
British Airways faces record 183.4 million pounds fine over data theft

British Airways faces record 183.4 million pounds fine over data theft

By Paul Sandle

LONDON (Reuters) - British Airways-owner IAG (L:ICAG) is facing a record $230 million (183.4 million pounds) fine for the theft of data from 500,000 customers from its website last year under tough new data-protection rules policed by the UK's Information Commissioner's Office (ICO).

The ICO proposed a penalty of £183.4 million, or 1.5% of British Airways' 2017 worldwide turnover, for the hack, which it said exposed poor security arrangements at the airline.

BA indicated that it planned to appeal against the fine, the product of European data protection rules, called GDPR, that came into force in 2018. They allow regulators to fine companies up to 4% of their global turnover for data-protection failures.

The attack involved traffic to the British Airways website being diverted to a fraudulent site, where customer details such as log in, payment card and travel booking details as well as names and addresses were harvested, the ICO said.

Information Commissioner Elizabeth Denham said: "People's personal data is just that – personal.

"When an organisation fails to protect it from loss, damage or theft it is more than an inconvenience. That's why the law is clear – when you are entrusted with personal data you must look after it."

BA's chairman and chief executive Alex Cruz said he was "surprised and disappointed" by the proposed penalty.

"British Airways responded quickly to a criminal act to steal customers' data," he said.

"We have found no evidence of fraud/fraudulent activity on accounts linked to the theft."

Willie Walsh, CEO of parent company IAG, said BA would be making representations to the ICO about the proposed fine.

"We intend to take all appropriate steps to defend the airline's position vigorously, including making any necessary appeals," he said.

Shares in IAG fell 0.8% to 452.7 pence by 0810 GMT.

Analyst Gerald Khoo at broker Liberum said the proposed fine equated to about 9 pence per IAG share.

"While IAG has more than adequate liquidity to cover the fine (Dec 2018 cash 3.8 billion euros, total liquidity 6.3 billion euros), the penalty is still substantial," he said.

The ICO, which could impose fines up to 500,000 under previous rules, had also investigated BA on behalf of other European regulators.

The ICO fined Facebook 500,000 pounds in 2018 for serious breaches of data protection law. It said the penalty would have "inevitably have been significantly higher under GDPR."

Latest comments

Risk Disclosure: Trading in financial instruments and/or cryptocurrencies involves high risks including the risk of losing some, or all, of your investment amount, and may not be suitable for all investors. Prices of cryptocurrencies are extremely volatile and may be affected by external factors such as financial, regulatory or political events. Trading on margin increases the financial risks.
Before deciding to trade in financial instrument or cryptocurrencies you should be fully informed of the risks and costs associated with trading the financial markets, carefully consider your investment objectives, level of experience, and risk appetite, and seek professional advice where needed.
Fusion Media would like to remind you that the data contained in this website is not necessarily real-time nor accurate. The data and prices on the website are not necessarily provided by any market or exchange, but may be provided by market makers, and so prices may not be accurate and may differ from the actual price at any given market, meaning prices are indicative and not appropriate for trading purposes. Fusion Media and any provider of the data contained in this website will not accept liability for any loss or damage as a result of your trading, or your reliance on the information contained within this website.
It is prohibited to use, store, reproduce, display, modify, transmit or distribute the data contained in this website without the explicit prior written permission of Fusion Media and/or the data provider. All intellectual property rights are reserved by the providers and/or the exchange providing the data contained in this website.
Fusion Media may be compensated by the advertisers that appear on the website, based on your interaction with the advertisements or advertisers.
© 2007-2024 - Fusion Media Limited. All Rights Reserved.