These things happen from time to time- the key is how BA responds. Nothing I have seen above causes me concern that BA would take this very seriously and act upon it. However the OP should report it without any delay. Notify BA and let them do the rest. The OP and/or affected passengers can report to the ICO themselves if they wish.