How the BA data protection breach was easily avoidable

We’ve said before that a part of the reason that we’re involved in the Group Action for the BA data protection breach is because we believe that the case for compensation is strong.

That’s why we have dedicated a great deal of our time and resources to the action. We have been fighting for the rights of those affected by the BA data breach, working tirelessly on a No Win, No Fee basis for our valued clients.

We’ve talked a lot about how better data protection practices and more robust security could have prevented this breach. We’ve also talked about the fact that GDPR and earlier breaches like the Equifax hack and the Ticketmaster breach should have been warning enough for British Airways to have taken action. Had they have taken action, they could have prevented this colossal incident. And doing so could have been very simple, and incredibly cost-effective.

A simple bug bounty could have prevented the BA data protection breach

A simple and relatively cost-effective bug bounty exercise could have prevented the mammoth BA data protection breach that resulted in the exposure of some half a million customers’ data.

In fact, research from HackerOne put the costs into perspective. They reportedly estimated that the costs of preventing the BA, Ticketmaster, TalkTalk and Carphone Warehouse breaches could have been prevented for less than £10,000.00. Assuming that BA would only be paying an estimated quarter of that, they could have saved themselves a great deal of money.

To put it into even greater perspective, they could have avoided their provisional £183m for a few grand. The potential pay-out they’re facing from the BA Group Action which could hit £3bn could have been saved! And all for a few thousand pounds! Even if a higher price was tagged, it could still have reportedly only been around £30,000.00, so the savings are obvious.

BA Group Action a strong case

Factors that include not only the simplicity of the attacks, but also how easily they could have been identified – and for how little – make the BA data protection breach group action case strong.

That’s why we offer No Win, No Fee representation for clients who claim with us.

Although the airline is yet to admit liability, which is common at this stage of a large group action case like this, we’re confident that we can succeed with our action. The law can entitle victims to be able to make a claim for data breach compensation for any distress suffered by the loss of control of personal information, and for any financial losses incurred.

You can claim for either or, but the recent court ruling can actually allow you to claim without having suffered any distress or loss whatsoever.

Joining the BA data protection breach action

You can join the BA data protection breach group action case easily by going to the website here and checking your eligibility.

If you’re eligible to join, you can answer a few more questions we need and then sign-up to the agreements that allow you to start your case. The agreements include the No Win, No Fee protection, and insurance and funding to ensure you can be a part of the court action.

Claiming with us means your case is with a Steering Committee firm. We have been at the forefront of the fight for justice since news of the attacks broke last year, and we’ll continue to be at the forefront until the end of the action.

Healthcare information data breaches

Fraudsters targeting first-time buyers