British Airways Plc

Companies / web services

Aliases / services: British Airways / ブリティッシュ・エアウェイズ / British Airways Plc
Official website: https://www.britishairways.com/

Sources identifying the operating company

https://www.britishairways.com/content/information/legal/privacy-policy

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

2018 reward-flight bookings

Response status: Not listed
Response information checked: 2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

IAG’s 25 October 2018 release notified a further possible exposure of card details used for reward bookings from 21 April to 28 July 2018. It distinguished this precautionary cohort from confirmed extraction.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

The notice advised notified customers to contact their bank or card issuer. Check the historical booking period covered by the notice.

Official service URL

https://www.britishairways.com/

Source URLs

Cyber-attack investigation update, 25 October 2018https://www.investegate.co.uk/announcement/rns/international-consolidated-airlines-group-sa-cdi---iag/update-on-british-airways-cyber-attack/5640849Service and operation documentation

Related official sources

Operator and company informationOfficial information directoryIdentifies British Airways Plc and the stated service scope.
Cyber-attack investigation update, 25 October 2018Official information directoryIAG’s 25 October 2018 release notified a further possible exposure of card details used for reward bookings from 21 April to 28 July 2018.