{"id":12112,"date":"2018-09-08T02:16:58","date_gmt":"2018-09-08T02:16:58","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/29295\/How-Did-Hackers-Get-Into-British-Airways.html"},"modified":"2018-09-08T02:16:58","modified_gmt":"2018-09-08T02:16:58","slug":"how-did-hackers-get-into-british-airways","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/how-did-hackers-get-into-british-airways\/","title":{"rendered":"How Did Hackers Get Into British Airways?"},"content":{"rendered":"
\"AImage copyright<\/span> Getty Images<\/span> <\/span>
Image caption<\/span> It isn’t clear how hackers boarded BA’s website and app – but cyber-security experts have some suggestions <\/span> <\/figcaption><\/figure>\n

British Airways has revealed that hackers managed to breach its website and app,<\/a> stealing data from many thousands of customers in the process.<\/p>\n

But how was this possible?<\/p>\n

BA has not revealed any technical details about the breach, but cyber-security experts have some suggestions of possible methods used.<\/p>\n

Names, email addresses and credit card details including card numbers, expiry dates and three-digit CVV codes were stolen by the hackers.<\/p>\n

At first glance, the firm’s statement<\/a> appears to give no details about the hack, but by “reading between the lines”, it is possible to infer some potential attack routes, says cyber-security expert Prof Alan Woodward at the University of Surrey.<\/p>\n

Take BA’s specification of the exact times and dates between which the attack occurred – 22:58 BST, 21 August 2018 until 21:45 BST, 5 September 2018 inclusive.<\/p>\n

“They very carefully worded the statement to say anybody who made a card payment between those two dates is at risk,” says Prof Woodward.<\/p>\n

“It looks very much like the details were nabbed at the point of entry – someone managed to get a script on to the website.”<\/p>\n