Manchester Airports Group (MAG) confirmed a cybersecurity incident where data from approximately 8.7 million customers was accessed, including email addresses, phone numbers, and postcodes, but not payment details. The breach affected Manchester, Stansted, and East Midlands airports.
The breach exposes personal data of millions of travelers, raising concerns about potential phishing attacks and identity theft, despite assurances that payment details were not compromised.
Manchester Airports Group (MAG), which operates Manchester, Stansted, and East Midlands airports, has been subjected to a significant cyber attack, resulting in the theft of data belonging to approximately 8.7 million customers. The breach, which occurred a few days before MAG became aware of it on Tuesday, involved access to customer information such as email addresses, phone numbers, vehicle registrations, and postcodes.
The compromised data pertains to bookings for airport car parks, lounges, and Fast Track services, as well as in-airport WIFI sign-ups. MAG has emphasized that no bank or payment details were accessed during the incident, and that the majority of affected customers only had their email addresses exposed.
MAG stated that they immediately contained the risk and are collaborating with specialist cybersecurity advisors and relevant authorities. The group has assured customers that airport operations, passenger safety, and aviation security remain unaffected. As a precautionary measure, access to the online 'Manage My Booking' service has been temporarily suspended, with customers advised to contact customer services for urgent amendments to bookings within the next 72 hours.
Customers are urged to remain vigilant for suspicious communications and to avoid sharing personal or financial information if contacted unexpectedly. MAG has apologized for any inconvenience or concern caused by the incident.