[dghf]

> if BA had been more security conscious and actually checked their third party JavaScript files regularly

Or not stored credit-card details in plain text.