Attackers Stole details of about 500,000 customers after users of British Airways's website were diverted to a fraudulent site. The General Data Protection Regulation (GDPR) has maximum fine of 4% annual global turnover. 

Read more: https://www.bbc.com/news/business-48905907