FlyerTalk Forums - View Single Post - BA Investigating Theft of Personal and Financial Data
Thread: BA Investigating Theft of Personal and Financial Data
View Single Post
Old Sep 11, 2018, 4:17 am
  #888  
Where am I today?
 
Join Date: Mar 2011
Location: Here, there and everywhere
Posts: 72
Originally Posted by armouredant
Here's RiskIQ's report on the JS card skim: https://www.riskiq.com/blog/labs/mag...irways-breach/
Very interesting! A key point is that it appears the hackers had access to the BA servers (not a 3rd party server) long before the attack and they had a substantial level of access. What else were they were able to do/view???

"While we can never know how much reach the attackers had on the British Airways servers, the fact that they were able to modify a resource for the site tells us the access was substantial, and the fact they likely had access long before the attack even started is a stark reminder about the vulnerability of web-facing assets" Bolding mine.

This brings up a whole set of new concerns.
Where am I today? is offline  
Reply