British Airways says it is investigating “as a matter of urgency” the theft of customer data from its website and mobile app.
The airline said personal and financial details of customers making bookings had been compromised.
BA said the breach took place between 22:58 BST on 21 August and 21:45 BST on 5 September.
However, the stolen data did not include travel or passport details, it added.
“The breach has been resolved and our website is working normally,” BA said in a statement
“We have notified the police and relevant authorities. We are deeply sorry for the disruption that this criminal activity has caused. We take the protection of our customers’ data very seriously.”