I have to disagree with Alex Cruz stolen data has not led to fraud/fraudulent activity. Recently, I had a flurry of fraudulent transactions on a UK credit card that had been used to book flights via the BA website at the time of the data breach. None of my other UK cards or my Spanish, none of which I had used with BA, have been subject to similar fraudulent activity. From this, I can only draw the conclusion that the BA data breach was the source of the data used.