Thursday, July 18, 2024

British Airways Facing £183.39 Million Fine Under GDPR for 2018 Data Breach

British Airways fined over £183 Million under the General Data Protection Regulation (GDPR) from the Information Commissioner’s Office (ICO) for 2018 data breach.

The cyber incidents believed to be started in June 2018 and the notice was issued in September 2018 by British Airways, meantime, the customers who made the booking through the website or mobile app were potentially affected.

During this cyber attack, the customers who have accessed the British Airways website being diverted to a fraudulent website where hackers stole the personal data of approximately 500,000 customers.

Based on the ICO investigation report, a huge data was compromised by poor security arrangements at the company and the stolen date including login, payment card, and travel booking details as well name and address information.

British Airways spokesperson told during the investigation “a third-party noticed some unusual activity and informed us about it. We immediately acted to close down the issue, and started an investigation as a matter of urgency.”

Since the General Data Protection Regulation (GDPR) applied on 25 May 2018, this new law applies to all companies that collect and process data belonging to the European Union (EU) citizens.

Read: Key Elements and Important Steps to General Data Protection Regulation (GDPR)

ICO has the capability to impose up to 4% of fine to the company global turnover. In this case, the fine was just 1.4 of British Airways 2017 turnover.

According to Information Commissioner Elizabeth Denham said: “People’s personal data is just that – personal. When an organisation fails to protect it from loss, damage or theft it is more than an inconvenience. That’s why the law is clear – when you are entrusted with personal data you must look after it. Those that don’t will face scrutiny from my office to check they have taken appropriate steps to protect fundamental privacy rights.”

Nik Whitfield, CEO of cybersecurity firm Panaseer said the proposed BA fine is “game-changing” for any company serving EU customers and “great news” for consumers’ privacy.

British Airways and the other regulators now have 28 days to make the decision to reduce the fine.

“British Airways has completely cooperated with the ICO investigation and has made improvements to its security arrangements since these events came to light”, the ICO said.

This case was thoroughly investigated by a lead supervisory authority on behalf of other EU Member State data protection authorities and takes its final decision.

It is worth to mention that” “On 21st January 2019, France’s data-privacy watchdog, The CNIL imposed a financial penalty of 50 Million Euros against the company GOOGLE LLC  for “lack of transparency, inadequate information and lack of valid consent regarding the ads personalization”

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates also you can take the Best Cybersecurity course online to keep yourself updated.


Latest articles

Volcano Demon Group Attacking Organizations With LukaLocker Ransomware

The Volcano Demon group has been discovered spreading a new ransomware called LukaLocker, which...

Resonance Security Launches Harmony to Monitor and Detect Threats to Web2 and Web3 Apps

Quick take:Harmony is the fourth cybersecurity application Resonance developed to address the disconnect in...

Beware! of New Phishing Tactics Mimic as HR Attacking Employees

Phishing attacks are becoming increasingly sophisticated, and the latest strategy targeting employees highlights this...

MirrorFace Attacking Organizations Exploiting Vulnerabilities In Internet-Facing Assets

MirrorFace threat actors have been targeting media, political organizations, and academic institutions since 2022,...

HardBit Ransomware Using Passphrase Protection To Evade Detection

In 2022, HardBit Ransomware emerged as version 4.0. Unlike typical ransomware groups, this ransomware...

New Poco RAT Weaponizing 7zip Files Using Google Drive

The hackers weaponize 7zip files to pass through security measures and deliver malware effectively.These...

New ShadowRoot Ransomware Attacking Business Via Weaponized PDF’s

X-Labs identified basic ransomware targeting Turkish businesses, delivered via PDF attachments in suspicious emails...
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Free Webinar

Low Rate DDoS Attack

9 of 10 sites on the AppTrana network have faced a DDoS attack in the last 30 days.
Some DDoS attacks could readily be blocked by rate-limiting, IP reputation checks and other basic mitigation methods.
More than 50% of the DDoS attacks are employing botnets to send slow DDoS attacks where millions of IPs are being employed to send one or two requests per minute..
Key takeaways include:

  • The mechanics of a low-DDoS attack
  • Fundamentals of behavioural AI and rate-limiting
  • Surgical mitigation actions to minimize false positives
  • Role of managed services in DDoS monitoring

Related Articles