[Updated] 2018 data breach : BA fined £20 million
Jul 10, 2019, 7:36 am
#181
FlyerTalk Evangelist
Join Date: Mar 2010
Location: JER
Programs: BA Gold/OWE, several MUCCI, and assorted Pensions!
Posts: 32,145
All the Financial institutions I deal with have become very sensitive over the last 6 months. Huge outbreak of ‘Know Your Customer’ and ‘Two Factor Authentication’. I guess I should be comforted by that.
Jul 10, 2019, 7:56 am
#182
Join Date: Apr 2005
Location: Windsor
Programs: BAEC Gold
Posts: 909
Sadly for BA “authentication” seems to involve providing them with extreme amounts of data rather than the standard “provide characters x, x & x”
Jul 10, 2019, 8:17 am
#183
FlyerTalk Evangelist
Join Date: Aug 2002
Location: London
Programs: Mucci. Nothing else matters.
Posts: 38,644
This is not always true. IME, when authenticating myself as a third party nominee, it's "please provide the second, fourth and fifth characters of your third party nominee password" (or some other selection).
Jul 10, 2019, 8:20 am
#184
Join Date: Apr 2012
Location: LON
Programs: Mucci, BAEC, Eurostar
Posts: 3,287
KYC is a regulatory requirement, mostly to fight against money laundering and make sure you're not financing terrorists.
Jul 10, 2019, 10:15 am
#185
FlyerTalk Evangelist
Join Date: Mar 2010
Location: JER
Programs: BA Gold/OWE, several MUCCI, and assorted Pensions!
Posts: 32,145
I’m a full supporter of enhanced fiscal security, even if it means I have to try to remember even more random passwords.
Jul 10, 2019, 10:25 am
#186
Join Date: Jun 2009
Location: UK
Programs: Lemonia. Best Greek ever.
Posts: 2,271
Is it legal for the CEO of a Company to deny that fraud/theft has taken place due to that Company's actions, when fraud/theft has clearly taken place?
Is there a legal case against BA for enabling the theft of info? The IT world has standards, and BA's IT is woefully short of those standards..............so BA enabled the theft of customer data.
It is particularly annoying to us old ones, who feel that BA have forced us to go online. I would much rather call up, and not be charged a premium for calling. Or drift in to the old Regent St office................ For instance, when I was on a BA RTW ticket, and wanted to get SWMBO and children to Bangkok from London, and me to Bangkok from the Sin stop on my RTW, the lovely folk in Regent St fixed it without breaking sweat.
Is there a legal case against BA for enabling the theft of info? The IT world has standards, and BA's IT is woefully short of those standards..............so BA enabled the theft of customer data.
It is particularly annoying to us old ones, who feel that BA have forced us to go online. I would much rather call up, and not be charged a premium for calling. Or drift in to the old Regent St office................ For instance, when I was on a BA RTW ticket, and wanted to get SWMBO and children to Bangkok from London, and me to Bangkok from the Sin stop on my RTW, the lovely folk in Regent St fixed it without breaking sweat.
Jul 10, 2019, 10:31 am
#187
Join Date: May 2006
Location: 5 miles from EMA
Programs: BD, BAEC Pleb, VS Pleb, Accor Pleb, HHonors Gold, Big White Season Pass
Posts: 5,904
Is it legal for the CEO of a Company to deny that fraud/theft has taken place due to that Company's actions, when fraud/theft has clearly taken place?
Is there a legal case against BA for enabling the theft of info? The IT world has standards, and BA's IT is woefully short of those standards..............so BA enabled the theft of customer data.
It is particularly annoying to us old ones, who feel that BA have forced us to go online. I would much rather call up, and not be charged a premium for calling. Or drift in to the old Regent St office................ For instance, when I was on a BA RTW ticket, and wanted to get SWMBO and children to Bangkok from London, and me to Bangkok from the Sin stop on my RTW, the lovely folk in Regent St fixed it without breaking sweat.
Is there a legal case against BA for enabling the theft of info? The IT world has standards, and BA's IT is woefully short of those standards..............so BA enabled the theft of customer data.
It is particularly annoying to us old ones, who feel that BA have forced us to go online. I would much rather call up, and not be charged a premium for calling. Or drift in to the old Regent St office................ For instance, when I was on a BA RTW ticket, and wanted to get SWMBO and children to Bangkok from London, and me to Bangkok from the Sin stop on my RTW, the lovely folk in Regent St fixed it without breaking sweat.
As for your changes well today you get either “That’ll be at least £300 sir” or “Computer says no”
Last edited by Tiger_lily; Jul 10, 2019 at 10:47 am
Jul 10, 2019, 10:40 am
#188
FlyerTalk Evangelist
Join Date: Mar 2010
Location: JER
Programs: BA Gold/OWE, several MUCCI, and assorted Pensions!
Posts: 32,145
@ Ancient Observer ... indeed, I remember going to the local Travel Agent and getting those flimsy tickets, with numerous carbon copies. That said, we did once visit the BA office here in JER, where we were largely ignored and, eventually, they were unable to answer our question anyway. Hey-Ho, back to ba.com. 
Jul 10, 2019, 12:31 pm
#189
Join Date: Sep 2013
Programs: BAEC Gold, EK Skywards (enhanced Blue !), Oman Air Sindbad Gold
Posts: 6,398
Is it legal for the CEO of a Company to deny that fraud/theft has taken place due to that Company's actions, when fraud/theft has clearly taken place?
Is there a legal case against BA for enabling the theft of info? The IT world has standards, and BA's IT is woefully short of those standards..............so BA enabled the theft of customer data.
.....................
Is there a legal case against BA for enabling the theft of info? The IT world has standards, and BA's IT is woefully short of those standards..............so BA enabled the theft of customer data.
.....................
Don’t have the expertise to comment on the merits of any legal action regarding CEO’s denials and protests of innocence etc etc.
But judging from the BA narrative thus far, the ‘case for the defence’ would seem to consist largely of a) Not sure what you mean .... I really can’t find evidence of any fraud, and b) whatever went wrong on the data front ....you’ll just have to blame it all on the hackers. .“It wasn’t me, Guv, honest”.
Jul 10, 2019, 12:38 pm
#190
Suspended
Join Date: Sep 2018
Location: Somewhere in the Air
Programs: BA GGL, *A Silver, OW Emerald, HH Diamond, Karahi Express
Posts: 554
Jul 10, 2019, 12:40 pm
#191
FlyerTalk Evangelist
Join Date: Nov 2011
Location: Brighton. UK
Programs: BA Gold / VS /IHG Diamond & Ambassador
Posts: 14,192
The ICO will take into account how honest and contrite BA has been about the whole issue. The 'bad boys did this so don't blame us' defence Alex Cruz (and now the President of Marriott) is trying simply won't work.
Like in the courts if you are contrite and admit your guilt you get treated more leniently when the sentence is haned down. Deny it all - despite proof that it was you that did it - and the sentence is increased.
but any turnaround now by BA would be seen as too late to repent.
Like in the courts if you are contrite and admit your guilt you get treated more leniently when the sentence is haned down. Deny it all - despite proof that it was you that did it - and the sentence is increased.
but any turnaround now by BA would be seen as too late to repent.
Jul 11, 2019, 12:47 am
#193
Join Date: Sep 2014
Location: Brexile in ADB
Programs: BA, TK, HHonours, Le Club, Best Western Rewards
Posts: 7,067
According to the Guardian the fine will stay in the UK and go to the Exchequer
https://www.theguardian.com/business...-data-watchdog
Wonder where the suggestions that it would go to the EU came from and more importantly why it was suggested.
https://www.theguardian.com/business...-data-watchdog
Wonder where the suggestions that it would go to the EU came from and more importantly why it was suggested.
Jul 11, 2019, 2:45 am
#195
FlyerTalk Evangelist
Join Date: Mar 2010
Location: JER
Programs: BA Gold/OWE, several MUCCI, and assorted Pensions!
Posts: 32,145