British Airways customer data stolen from its website