British Airways faces a record of two hundred and thirty million
dollars fine after a website failure compromised the personal details
of roughly five hundred thousand customers.
It would be the largest penalty yet under a tough privacy rule known as the General Data Protection Regulation, which came into force last year in the European Union.
The UK Information Commissioner’s Office said that weak security
allowed user traffic to be diverted from the British Airways website
to a fraudulent page which started in June 2018.
The regulator said the company will have a chance to contest the proposed fine.
According to the regulator, attackers were able to harvest customer
details including log INS, payment cards, and travel booking details.
Comments are closed for this post.