If this is an interception of payment card and CVV, what about the "Verified by Visa" or "Mastercard Securecode" page that sometimes follows with CC payments? Is that compromised too? I suppose we will have to wait and see.
.... as a slight amusement, Setting the scene: I was in T5 GF tucking into my grub last night when it came on the BBC news. I had just seen it on a retweet from a USA security site [briankrebs] and rapidly checked FT and saw this thread, so had about 5 minutes notice ahead of many others dining. Lots of heads turned to the screen as BA images etc came up and looks of horror as the subtitles appeared followed by multiple phones being grabbed!! Because of the audience, probably everyone there is affected.