British Airways frequent-flyer accounts hacked

I'm affected. Their e-mail to customers said "We understand this was login information relating to a different online service which you may have also used to access your Executive Club account."

That sounds like victim-blaming: I didn't use the same username or password anywhere else on the Internet.

official notice is here: https://ukprepin.custhelp.com/app/answers/detail/a_id/5249/~...

I know some services have access to frequent flyer accounts so you can track points / bookings / etc - TripIt is one such service.

I really don't like how they have detected the activity but aren't informing customers what external service is affected. No other service has indicated an issue publicly (e.g. TripIt) so now I have to assume a bunch of services are affected.