#manchester airports group

Manchester Airports Group breach exposes booking and Wi-Fi data for 8.7 million travelers

Manchester Airports Group (MAG), operator of Manchester, London Stansted, and East Midlands airports, announced a cyberattack that exposed personal data belonging to approximately 8.7 million customers. Unauthorized third parties gained access to systems handling auxiliary airport services a few days prior to discovery on Tuesday. The exposed data includes customer email addresses, phone numbers, vehicle registration numbers, and postcodes collected via car park reservations, lounge access, Fast Track bookings, and airport Wi-Fi registration captive portals. MAG stated that in the vast majority of cases, only email addresses were compromised. The operator emphasized that neither MAG nor the compromised systems store customer bank or payment card data, so no financial records were leaked. Aviation security, flight schedules, and day-to-day airport operations remain unaffected by the incident. Following detection, MAG isolated the impacted systems, engaged external incident response specialists, and notified relevant UK regulatory authorities. As an immediate containment and precautionary measure, the company disabled its online Manage My Booking portal. Passengers requiring booking modifications within 72 hours are being routed to phone support while upcoming reservations remain active. MAG has initiated direct email notifications to impacted travelers, advising vigilance against follow-up phishing attempts.