In the meantime I've signed up for CIFAS protective registration as some previous posters have done. I'm not too concerned about my card details being leaked, but I am about my personal details and I think a few extra identity checks are worth it for the additional protection.
Will be interesting to see if BA will be happy to pay for the £20 fee...