Could You Be Affected by the British Airways Staff Data Breach?

A cyber attack may have compromised data belonging to current and former staff.

Register your interest to stay informed and receive updates if this claim is taken forward by one of our partner law firms.

Join the Claim isn’t a law firm. We connect you with regulated UK firms that run group action claims. If one of our partner firms takes this case forward, we’ll share more details, including how to check your eligibility. 

Quick & Simple

Register your interest

Stay Informed

Get justice

Overview

In June 2023, British Airways confirmed that personal data belonging to current and former staff had been compromised in a serious cyber-attack.

The breach happened via Zellis, a company providing payroll services to BA, after hackers exploited a vulnerability in third-party software.

If you worked for BA and were paid through its UK or Ireland payroll, your personal details could be at risk. This includes sensitive information like your name, address, date of birth, national insurance number, bank details (account number and sort code) and pay information.

This kind of data falling into the wrong hands can lead to fraud and identity theft. And while BA has offered credit monitoring, that doesn’t undo the potential damage.

Lawyers are now bringing compensation claims on behalf of affected BA employees.

We are monitoring the situation closely. Register your interest and we’ll keep you updated if one of our regulated UK partner law firms is able to take this claim forward.

British Airways data breach – At a glance

Status

Stay Informed

What do we know about the British Airways employee data breach?

  • Criminals exploited a vulnerability in the MOVEit file transfer app, which is used by thousands of organisations around the world.
  • The breach affected payroll provider Zellis, – which used MOVEit.
  • Zellis provided payroll support services to British Airways.
  • The data breach affects current and former British Airways staff – who were employed on or before June 2023.
  • The criminals behind the data breach are thought to belong to the ‘Clop’ Russian crime group.   

How Join the Claim works​

Quick survey

Take a moment to answer a few simple questions so we can understand your connection and keep you updated.

Register interest

Share your details so we can keep you informed if any updates become available.

Join a claim

If a partner law firm takes this claim forward, we’ll let you know the next steps and how to join.

Latest updates on the British Airways employee data breach

  • June 2023

    Zellis, the payroll provider used by British Airways, confirms it has been compromised by the cyberattack. Cybersecurity experts link the attack to the Russian ransomware group Clop (also known as C10p), which had exploited the MOVEit vulnerability across multiple global organisations.

    BA contacted current and former staff to alert them to the data breach.

  • May 2023

    Hackers exploited a vulnerability in the MOVEit file transfer app. Progress Software, which owns the app, admitted the data hack.

    We’ll provide more updates on the British Airways employee data breach as they occur.  

We’ll provide more updates as they occur.   

Join the claim
Join the claim
Join the claim

Who could be affected by the British Airways employee data breach?

If you are a current or former BA staff, your data might have been compromised by a cyber attack.

Register to stay updated and we’ll let you know if a partner law firm takes this claim forward.

Frequently asked questions about the British Airways staff data breach

Zellis, a third-party payroll provider used by British Airways experienced a data breach when hackers exploited a vulnerability in a popular file transfer tool called MOVEit. As a result, the personal information of many British Airways employees may have been accessed by hackers. This includes names, dates of birth, National Insurance numbers, and bank details.

The breach could have exposed sensitive information like your name, address, date of birth, national insurance number, bank details (account number and sort code) and pay information.

Yes. Even if no money was taken, the breach may still have caused stress, anxiety, or concern about your privacy. Your personal data should have been safeguarded — and when it isn’t, that’s a serious issue.

A group action claim allows people affected by the same issue to take action together. This strength in numbers helps stand up to big organisations. Join the Claim helps connect people with law firms so these actions have real impact.

Rated Excellent


on REVIEWS.io

Rated Excellent on REVIEWS.io

Join the claim
Clifford
Very easy to sign up, hope its sorted soon
Susan
Very easy and quick to complete the claim Everything was explained well and fees payable in etc were made very clear
Peter
So easy to sign up for the claim

Latest British Airways data breach news

Security researchers are seeing a major spike in scans targeting MOVEit servers. Here’s what it...
It’s been two years since the British Airways employee data breach, but affected staff can...
Were you affected by the Boots employee data breach? Find out if you could claim...