This is an interesting thread and strikes an interesting topic with regards to BA and data privacy. I will not expand on this further, but I think BA take breaches very seriously:

Some time ago, I became aware of a situation where it was claimed BA had reached out to a "respected" FT member (not a mod) concerning the alleged behaviour of another FTer. It seemed unbelievable but the suggestion was taken seriously, fully investigated and of course there was no evidence of any such contact. In other words it was hogwash, but it was good to see that BA took it seriously and it was pleasing how it was handled from the outset by making the proper contacts. Quite rightly, data privacy is very important and the suggestion of BA directly contacting a Flyertalker was an utter fabrication on his/her part.