Financial and personal data has been stolen from potentially hundreds of thousands of British Airways customers who booked online in recent weeks, extending a run of embarrassing technological mishaps suffered by the UK flag carrier.
The thefts occurred during a data breach that affected bookings made on the airline's website and app between August 21 and September 5, parent International Airlines Group said on Thursday.
Around 380 000 card payments were "compromised", it said.
BA chairman and chief executive, Alex Cruz, said the carrier was "deeply sorry" for the disruption caused by the criminal activity.
"We take the protection of our customers' data very seriously," he said.