I was expecting something to crop up for myself. And this afternoon the email arrived.
I have a dormant MP profile (used to have a CX Gold from UK Amex).
But I booked in Jan 18 and flew with CX back in May 18 but the booking had no linkage to my old MP profile and was just booked on the CX website and I used BA for status and earning. So for someone with a dormant MP profile and a recent booking not linked to a CX login, the damage was:
These specific types of personal data about you were accessed:
Your travel or loyalty profile was not accessed in full, and your password was not compromised.