British Airways Faces Landmark $230 Million Data-Theft Fine

  • Would be first major pentalty under EU data-protection rules
  • ICO says hack affected 500,000 customers over 4 months in 2018
Photographer: Jason Alden/Bloomberg
Lock
This article is for subscribers only.

The U.K. plans to fine British Airways 183.4 million pounds ($230 million) over computer attacks that exposed customer data, marking the first major British application of far-reaching European Union rules requiring companies to tighten anti-hacking measures.

The proposed penalty relates to data theft affecting about 500,000 customers between June and September last year, the U.K. Information Commissioner’s Office, which protects data privacy, said in a statement Monday. BA parent IAG SA said the fine amounts to 1.5% of the airline’s 2017 revenue.