Incident

British Airways data breach

incident:british_airways_data_breach Also: BA breach

Web-skimming incident involving a modified Modernizr library and stolen customer payment information.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
outgoing TARGETS British Airways Explicit 52
outgoing INVOLVES Modernizr skimmer Derived 52
outgoing ASSOCIATED_WITH Magecart Uncertain 52

Claims

British Airways data breach TARGETS British Airways

The British Airways data-breach incident targeted British Airways websites and payment systems.

Explicit Confidence 99% · Jonathan Klijnsma EP 52 Details

“they breached BA”

Jonathan Klijnsma · offsets 24198–24214

British Airways data breach INVOLVES Modernizr skimmer

The British Airways breach involved a small skimmer added to the Modernizr JavaScript library.

Derived Confidence 94% · Jonathan Klijnsma EP 52 Details

“the file was a JavaScript library called Modernizr”

Jonathan Klijnsma · offsets 22254–22304

“they added a really, really, really tiny script”

Jonathan Klijnsma · offsets 22904–22951

British Airways data breach ASSOCIATED_WITH Magecart

RiskIQ's findings suggested that the British Airways breach may have involved the same Magecart skimming group or code, but the episode does not establish this as certain.

Uncertain Confidence 86% · Jack Rhysider EP 52 Details

“he was able to take this knowledge and searched his database of cashed websites to see if this same group might be hacking another website”

Jack Rhysider · offsets 26713–26851

“the technique that we observed so many times”