Manchester Airports Group (MAG), the operator of Manchester, East Midlands, and London Stansted airports, has confirmed a significant cyber security incident resulting in the unauthorized access of personal data belonging to approximately 8.7 million customers. The breach, which occurred over the weekend, involved the theft of contact details, postcodes, and vehicle registration numbers.
The company stated that the majority of the compromised data consisted of email addresses provided by passengers when signing up for WiFi services within airport terminals. Additional information, such as vehicle registrations and contact details, was obtained from records related to car park bookings, lounge access, and fast-track service reservations. MAG emphasized that the systems affected did not contain customer bank or payment information.
Following the intrusion, the hackers issued a ransom demand for the return of the stolen data. MAG confirmed that it has refused to pay the fee. The group became aware of the breach on Tuesday and moved to contain the risk, working with specialist advisors to secure their systems and prevent further unauthorized access.
In a statement, the airport operator apologized for the inconvenience and concern caused by the incident, noting that it takes the protection of customer information extremely seriously. The firm explicitly stated that “at no point has passenger safety or aviation security been compromised” during the event.
The Information Commissioner’s Office (ICO) has been formally notified of the breach. A spokesperson for the regulator confirmed they are currently assessing the information provided by MAG and have directed concerned individuals to the ICO website for support and guidance.
While MAG stated that the identity of the perpetrators is known and that relevant authorities have been informed, the investigation remains ongoing. The company has urged all affected customers to remain vigilant against potential phishing attempts, including suspicious emails, text messages, or phone calls, and to avoid opening attachments from unknown sources.
The news has caused alarm among travelers, including Michael Goddard, 71, from Cheshire, who received notification that his data had been breached after using services at East Midlands and Manchester airports. Expressing his concern, Goddard noted that the exposure of his name and address creates significant anxiety regarding how the stolen information might be utilized. He added that he and his wife, Julie, are seeking further reassurance and clarity regarding potential compensation should the breach lead to further issues.
MAG continues to work with authorities as it manages the aftermath of the attack, maintaining that it took immediate steps to protect customers once the breach was identified. The report also notes that michael Goddard, 71, from Cheshire, said both he and his wife, Julie, 68, had received an email earlier from MAG notifying them that their data had been breached. The report also notes that i was shocked,” Goddard said Radio Manchester. The report also notes that to find your personal info has been stolen – it is alarming. The report also notes that my information has gone and I don’t know what they’re going to do with it. The report also notes that they’ve got my name, so it doesn’t take too much to find out who I am, they have my address in the form of the postcode. The report also notes that i’m not 100% reassured by what Manchester Airports Group has said. The report also notes that they will adequately compensate us, we want the reassurance that if anything happens. The report also notes that tell us which stories we should cover in Greater Manchester.











Comments