Originally Posted by
cathaychap
I believe what Cathay is saying is that nobody has had their full profile taken. It's more bits of data taken. Like a few numbers of a passport and half an email address. At any rate, visit infosecurity.cathaypacific.com if concerned. The good thing is that CX, unlike BA, has a coordinated response to the threat. I had to cancel two credit cards with the BA thing.
I really have to disagree. BA at least notified the affected customers promptly and although the news of the loss was unpalatable they managed to pull off the notification quickly, how some of the card issuers have responded to the breach has been haphazard but that is not BAs direct fault.
Cathay have been sitting on this for 7 months and have been irresponsible in their inaction and for EU citizens would have automatically been guilty of an unnecessary delay if the breach had happened since GDPR had been inacted.