The penalty imposed by the Information Commissioner’s Office was reduced from an originally intended £184 million, in part due to the economic hit the airline industry has suffered from COVID-19.
"We are pleased the ICO recognizes that we have made considerable improvements to the security of our systems since the attack and that we fully cooperated with its investigation,” British Airways said in a statement.