First large scale test of GDPR legislation perhaps?
I was thinking the very same thing and yes more than likely it will be. Could be a very big fine for BA or IAG. Someone just messaged me to say that they hope it was a script kiddie who hasn't been able to do anything with the data. I replied that I found that prospect more worrying i.e. the largest airline in the UK being able to be successfully attacked by a script kiddie.