Manchester Airports Group (MAG), which operates Manchester, Stansted and East Midlands airports, says an extortion group stole customer data in a cyberattack affecting an estimated 8.7 million people. The incident did not disrupt airport operations, compromise passenger safety or aviation security, or involve ransomware, but it creates a risk of phishing attempts against affected customers.

MAG says most of the exposed information was email addresses collected through public Wi-Fi registrations, with smaller amounts linked to incomplete parking or Fast Track enquiries and completed bookings. The company says no bank or payment details were held in the affected system, it has not paid the extortion demand, and it has temporarily withdrawn access to its Manage My Booking service while it investigates; affected customers have been contacted.