Responding to customer complaints on Twitter, British Airways requested customers to confirm their name and booking reference — including passport numbers and other personal information — through the social media platform. The Verge reports that the company stated the information was necessary in order to comply with the EU General Data Protection Regulation. British Airways amended its message to its customers to indicate they should direct message the information after some posted details on the public feed. Security researcher and Ph.D. student Mustafa Al-Bassam discovered the Twitter thread while attempting to check in to his flight.
Full Story