Cyberattack exposes data of 8.7 million MAG customers
Manchester Airports Group (MAG), which operates Manchester, Stansted and East Midlands airports, says an extortion group stole customer data in a cyberattack affecting an estimated 8.7 million people. The incident did not disrupt airport operations, compromise passenger safety or aviation security, or involve ransomware, but it creates a risk of phishing attempts against affected customers.
MAG says most of the exposed information was email addresses collected through public Wi-Fi registrations, with smaller amounts linked to incomplete parking or Fast Track enquiries and completed bookings. The company says no bank or payment details were held in the affected system, it has not paid the extortion demand, and it has temporarily withdrawn access to its Manage My Booking service while it investigates; affected customers have been contacted.
- MAG says 8.7 million customers may be affected.
- Most stolen data was email addresses from Wi-Fi registrations.
- No payment data or airport operations were compromised.
New here? Start with this
Manchester Airports Group (MAG) runs Manchester, Stansted and East Midlands airports. Like many airport operators, it collects customer information when people use services such as public Wi-Fi, parking and Fast Track booking.
Personal details held by a company can be valuable to criminals, who may use them to send convincing messages that try to obtain passwords or other information. This matters to customers whose details were collected, as well as to the airports and the company responsible for protecting that data.
Both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
One can reasonably defend MAG's response by noting that good system architecture—separating sensitive financial data—limited potential damage, and the company's refusal to pay extortion demands, swift investigation, and customer communication represent responsible crisis management. Operational continuity and contained harm demonstrate competent practice in an environment where sophisticated attacks on major infrastructure are an ongoing threat.
The case against
The breach's scale—8.7 million customer records—reveals serious preventative security failures that shouldn't be overshadowed by adequate crisis response. Rather than accepting that such breaches are inevitable and measuring success by how they're managed afterwards, this incident highlights why critical infrastructure needs stronger security standards designed to prevent such exposures in the first place.
Read the full article at the source →
Originally published by The Register as “Cybercrooks jet off with Manchester Airports Group customer data”.