BA Data Breach

Did British Airways leak your private data?

You could be eligible to claim up to £2,000 depending on your individual circumstances.

On 7th September 2018, British Airways announced that there had been a breach of its security systems.

Over 500,000 BA customers like you had their personal data leaked.

British Airways was fined £183 million by the Information Commissioner’s Office for their ‘poor security arrangements’. This was levied in October 2020 considering the Covid-19 pandemic and reduced to £20 million. Now it’s time for the victims to be compensated

Your personal and financial data may have been leaked

Full names, debit and credit card numbers (including CVVs), addresses, and email addresses were among the personal data leaked in the breach. The breach led to all BA customers being required to monitor financial transactions on their accounts and, in some cases, cancel their payment cards.

You have a right to compensation

BA offered a reimbursement for customers who suffered ‘direct financial losses’ and ‘credit rate monitoring’. This is not good enough.

Under Article 82 of the EU General Data Protection Regulation (EU-GDPR), you have a right to compensation for non-material damage.

This means that regardless of direct losses, you are entitled to compensation for the inconvenience, distress, and annoyance associated with the data leak.

No-win, no-fee

If you do not receive any compensation for your claim, rest assured you will not have to pay anything.

Time to claim is running out

If you are a BA customer and believe you had your sensitive data leaked in 2018, you have until March 2021 to submit your claim for compensation and justice

It takes under a minute to see if you can claim.

Are you eligible to claim for the BA data breach?

To claim, you must have received an email from BA notifying you that you were a victim.

Search your inbox for an email from BA notifying you of your data being stolen. The subject line may have started with

‘Criminal Theft of Customer Data, more information.’

It’s likely that you received the email in 2018. Look back through your email account, checking your junk or spam folders, to see if BA sent you this email.

If you booked or amended a flight with BA between July and September 2018, you are likely to be eligible to claim.

PGMBM: your best chance for compensation

We are a respected global litigation firm, passionate about protecting your personal data against corporate wrongdoing.

We exist to give you a voice, representing thousands of victims of BA’s data breach, and holding BA to account.

Our firm combines the UK’s leading solicitors and barristers with the financial resources and expertise of American class-action lawyers.

In the USA, our sister firm has already won over $1billion in compensation for customers in similar cases.

By joining PGMBM’s group action with thousands of other affected BA customers, you have the best chance of ensuring you receive the highest compensation possible.

We’re doing everything to make the process as simple as possible for you.

There has already been a significant interest in the claim. We are giving everyone until the end of March 2021 to join the claim and be a part of the action. It takes under a minute to sign up – get started now.

Reasons to claim

Data Security

Your data is important. Let's make sure corporates treat it that way.

Financial Gain

You could receive up to £2,000 if you are eligible.

We make it simple

It simply takes under a minute to check if you can claim.


Our legal team is working hard and we have a strong case against BA. We want to make sure you receive the maximum amount of compensation possible: up to £2,000 per person.
It is extremely unlikely you will have to go to court. In the rare event that BA insists on defending the case all the way to trial, a small handful of claimants may be selected to give evidence in the group action claim.
It will not cost you a penny to join the claim. We are acting on a no-win no-fee basis, meaning you will never have to pay anything out of pocket.

We’ve made the process as simple as possible – it takes under a minute.

All you have to do is submit your details and answer a couple of eligibility questions, and we’ll do the rest.

You will be asked to share your name, email address, postal address, and phone number to join the claim.

You may also be asked to share the email you received from BA and/or your BA booking number to check your eligibility.

If you received an email from BA about the breach, you are eligible.

If you cannot find the email but remember receiving it, we can check your eligibility using other means – submit your claim anyway and we’ll do the rest.

If you did not receive the email, you’re lucky enough for your personal data not to have been part of the breach.

There is no risk, no signup costs attached, and your data is kept confidential at all times.

Our lawyers are committed to winning your claim as quickly as possible.

In the event that we reach a settlement, you could receive your compensation within the next six months.

We will keep you informed with regular case updates.

The claim will be processed as a group action, meaning that we run all of our clients’ cases under one ‘umbrella’.

This makes it easier to move all the cases forward together.

Your claim will be brought to court under the Data Protection Act 2018.

This act incorporates GDPR regulations and we will be expressing BA’s misuse of private information and a breach of confidence.

You will never have to pay in the highly unlikely event that we don’t win the claim.

As this is a no-win no-fee case, we bear the cost of insurance to cover any unexpected court and legal fees.

Yes, everyone affected by the data breach is entitled to claim. Under GDPR rules, you can claim for inconvenience, meaning your employer cannot impact your right to claim.

We are acting on a no-win no-fee basis. We do not charge you up-front for our time.

Once the claim has been won, we take a percentage of your winnings to cover our time, funding, insurance, and court fees.

If you submitted your claim before 6 April 2019 you are entitled to 100% of your winnings; we will not deduct a penny.

If you signed up after this date, we take a 35% cut to cover our costs.


PGMBM (a trading name of Excello Law Limited) – SRA License Number 512898

5 Chancery Ln
London WC2A 1 LG

13/01 09:00

Our Chatbot is currently unavailable due to scheduled maintenance.

Please call us on 03330 155 900 or try again later