Originally Posted by
Often1
Why this happened is irrelevant. All that is important is for OP to report this immediately. OP uses the term "recently" suggesting that this has been going on for some time. It is either important to notify BA immediately or it is of no importance at all.
First, the passengers are deprived of the information they presumably require. While it can be located elsewhere, that is a nuisance.
Second, if the passenger entered an incorrect email address, the passenger needs to correct that as the passenger is inadverdently (presumably) distributing the information. If the error is BA's, it is BA causing the harm. But, either way, fault aside, the only way to end it is to notify BA.
I appreciate the sense of urgency you are trying to convey but I wouldn't be particularly inclined to drop personal and professional matters of greater importance to me to deal with such an issue as soon as it arose, especially as it does not seem to have been the "fault" of anyone but BA's.
My FF accounts with BA and Avios are secure and I have absolutely no suspicions in this respect.
I highly doubt that the traveler entered the wrong e-mail address by mistake - my e-mail address is composed of my lengthy first and middle names, and has 14 alpha-numerical characters. The last names of the travelers (the e-mails don't include their first names) are pretty straightforward English surnames.
In any case, it is clear that BA has failed its duty to safeguard the personal information that it holds in this case. The crux of the matter is whether the cause of this failure was potentially avoidable, especially if BA were aware of it before.