British Airways (2018)

In 2018, British Airways faced one of the most serious cyberattacks in its history. Customer data was compromised through a web skimming attack (also known as Magecart). The attackers used malicious JavaScript code that was injected into the payment page and the mobile application. They stole credit card information and personal customer data without the company immediately realizing it. While this was not a SQL Injection attack, it was similar in effect, as sensitive financial data was compromised. Approximately 244,000 customers were affected, including their names, addresses, credit card details, and even CVV codes. The failure to store data in an encrypted format and the lack of sufficient control over modifications to the website's code allowed the attack to succeed.