An investigation into the British Airways website data breach has revealed that BA were subject to a second data breach, however it remains unclear as to whether this was a separate incident or one that was symptomatic of its previous breach.
Mishcon de Reya Data Protection Advisor Jon Baines has been quoted in SC Magazine UK in relation to further developments in the investigation:
"If BA's investigations have now revealed a completely separate breach, then they would have a legal obligation to make a second report to the ICO. If, however, this latest news just constitutes further details on the original breach, they may not need to make another formal report."
Read the full article here.