BAEC password compromise
#1
Original Poster
Join Date: Oct 2008
Location: London
Posts: 1,503
BAEC password compromise
My BAEC account password was recently compromised (not from me as I never divulge it) and can see some spam emails quoting my password back to me.
Are BA certain that BAEC account passwords were not compromised during the recent data leaks? I had to speak to someone at BAEC to try and reset my password as the site was playing up when I tried. I mentioned the compromise and asked whether it was linked to the recent data theft, but didn't get a clear answer.
Are BA certain that BAEC account passwords were not compromised during the recent data leaks? I had to speak to someone at BAEC to try and reset my password as the site was playing up when I tried. I mentioned the compromise and asked whether it was linked to the recent data theft, but didn't get a clear answer.
#2
Ambassador: Emirates Airlines
Join Date: Sep 2004
Location: Manchester, UK
Posts: 18,613
My BAEC account password was recently compromised (not from me as I never divulge it) and can see some spam emails quoting my password back to me.
Are BA certain that BAEC account passwords were not compromised during the recent data leaks? I had to speak to someone at BAEC to try and reset my password as the site was playing up when I tried. I mentioned the compromise and asked whether it was linked to the recent data theft, but didn't get a clear answer.
Are BA certain that BAEC account passwords were not compromised during the recent data leaks? I had to speak to someone at BAEC to try and reset my password as the site was playing up when I tried. I mentioned the compromise and asked whether it was linked to the recent data theft, but didn't get a clear answer.
Enter the password into the following site, and it will tell you if it's been leaked (it's perfectly safe) :-
https://haveibeenpwned.com/Passwords
Edit : this is the thread :-
And so it begins — blackmail attempt following BA data theft
#6
Join Date: Jan 2016
Location: LON
Programs: BAEC
Posts: 3,916
Yep, we're all quick off the mark to blame the provider for leaking a password and whikst there are a large number of websites need to their game, the balance probability these days is that malware on an end user device has sniffed the password and compromised it more often than it being compromised by the service provider.
#7
Ambassador: Emirates Airlines
Join Date: Sep 2004
Location: Manchester, UK
Posts: 18,613
Yep, we're all quick off the mark to blame the provider for leaking a password and whikst there are a large number of websites need to their game, the balance probability these days is that malware on an end user device has sniffed the password and compromised it more often than it being compromised by the service provider.
#10
Join Date: Apr 2015
Location: Oxford
Programs: Skyteam Elite+, VS Red, HHonours Diamond, Accor Plat
Posts: 629
Tonight BA admitted to a second data breach. The original one compromised data from 21 August to 5 September. Tonight's admission adds in a second period:
It would not surprise me if other vulnerabilities are also lurking in BA's website waiting to be admitted to.
Those impacted were people making reward bookings between April 21 and July 28, 2018 and who used a payment card.
#11
Original Poster
Join Date: Oct 2008
Location: London
Posts: 1,503
Yep, we're all quick off the mark to blame the provider for leaking a password and whikst there are a large number of websites need to their game, the balance probability these days is that malware on an end user device has sniffed the password and compromised it more often than it being compromised by the service provider.
The two massive data breaches by BA over recent months are merely a coincidence