ba.com security - pesky Russians in my account?
 

Logged into ba.com this morning to check in for a flight to be greeted with a "please change your password" warning screen. Duly done, during checkin I see my contact phone number has been changed from my UK mobile number to a Russian number. 400K avios balance still intact fortunately but clearly BA are still having security issues - strongly recommend considering being proactive and changing your password and checking your bookings and balance.

Don't forget that it could be you that has security issues.

Could be - but if someone simply got hold of my password and changed personal details or made bookings (like I do a few times a week), it wouldn't trigger a "please change your password" security warning.

Indeed.

https://haveibeenpwned.com/

is a site which allows you to see if your email address (and associated password) has been leaked via one of the big hacks in recent years. Mine, for example, is on the Adobe hack list.

Of course, you'll have to decide whether you trust the site not to sell your email address to spammers...

Did you try calling the number?

My mobile number is also apparently changed to be Russian - with a +7 initial code - but actually I think it's a coding error on ba.com where UK mobile numbers (which all start with a 7) have had the initial 0 removed and now have the 7 as the country code rather than the +44.

The rest of the number is the same as my mobile number!

I've just changed it back to a +44 :)

I'd be signing them up to all sorts of stuff :D Especially good if its a mobile number - those premium services are expensive.

Yikes!!! I'm on 2 of the lists :o

Take it very seriously. Change every password and login information on everything you can remember.

I have one email that was in the Adobe hack and it prompted me to change my passwords (and use LastPass). But I note that the Adobe hack also got away with the answers to security questions, which I hadn't thought about before.

Yep, me too and that was my take on it too. Same number, just the country code that was wrong.

Thanks for linking this website. I had no idea such a thing existed.

Also, bear in mind that this site does not include every breach known to man. I put in an account that I know has been exposed in at least a half dozen breaches by now, but it comes up clean.

Same! I thought it was me being stupid

Phew no Pwnage found