Around 185,000 further British Airways customers may have had their details hacked, according to the company’s owner IAG.
In September the company contacted around 380,000 customers to inform them that their data could have been breached.
However on Thursday, the airline announced that an investigation found that more customers could have been affected.
British Airways says it is contacting two groups of customers.
This includes the holders of 77,000 payment cards whose name, billing address, email address, card payment information – including card number, expiry date and card verification value – have potentially been compromised.
A further 108,000 people’s personal details without card verification value have also been compromised.
Those impacted were people making reward bookings between April 21 and July 28, 2018 and who used a payment card.
When the original breach was identified in September, banks were inundated with calls, leaving account holders in lengthy queues, while some BA customers said they had to cancel their cards as a result.
IAG said in a statement: “While British Airways does not have conclusive evidence that the data was removed from its systems, it is taking a prudent approach in notifying potentially affected customers, advising them to contact their bank card or provider as a precaution.
“Since the announcement on September 6, 2018, British Airways can confirm that it has had no verified cases of fraud.”
The airline now faces a possible fine of around £500 million over the breach with the Information Commissioner’s Office also investigating the incident.
Additional reporting by PA.
