← British Airways

2018 British Airways — 380K+ cards, Magecart

2018 429.6K records affected Share on X

Data compromised

Names, addresses, card numbers, CVV

Technical writeup

Magecart injected JS on payment pages. 244K had names, addresses, cards, CVV. 185K in earlier April–July breach. ICO fined £20M (reduced from £183M).

Root cause

Magecart; third-party credential compromise

References