British Airways (BA) has settled one of the U.K.’s largest group actions after thousands of people sought compensation following a data breach that resulted in the airline being hit with a record privacy violation fine.
The 2018 breach affected 420,000 customers and staff and included the leaking of names, addresses, and payment card details. It led to the U.K. Information Commissioner’s Office (ICO) handing down a £20 million (then-U.S. $26 million) penalty under the EU’s General Data Protection Regulation (GDPR)—its largest fine to date.
