Cyber-attack exposes data of 8.7 million MAG customers
Developed over time first seen 2 months ago
Hackers accessed personal data belonging to about 8.7 million customers of Manchester Airports Group, which operates Manchester, London Stansted and East Midlands airports. MAG said airport operations, passenger safety and aviation security were unaffected, but the breach creates a heightened risk of phishing and other fraudulent contact for affected customers.
The compromised system held information from car park, lounge and fast-track bookings, plus airport Wi-Fi registrations, including email addresses, telephone numbers, postcodes and vehicle registration numbers. MAG said it contained the incident promptly, notified relevant authorities and confirmed that no bank or payment details were held on the affected system; its three airports handled 54 million passengers combined last year.
- Hackers accessed data of 8.7 million MAG customers.
- Airport operations and aviation security were unaffected.
- Customers are warned to watch for phishing attempts.
New here? Start with this
Manchester Airports Group, known as MAG, runs three major UK airports: Manchester, London Stansted and East Midlands. Alongside flights, it provides services such as airport parking, lounge access, fast-track security bookings and Wi-Fi registration.
A cyber-attack is an unauthorised attempt to access computer systems or information. Personal details such as email addresses, phone numbers, postcodes and vehicle registration numbers can be useful to criminals trying to make scam messages appear convincing.
Phishing is a type of fraud in which criminals send messages that seem to come from a trusted company, often to obtain passwords or other sensitive information. Airport operators hold customer data for many everyday travel services, so breaches can affect people even when airport flights, safety systems and payment details are not involved.
Both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
MAG’s response can be viewed as proportionate to the nature of the incident: it contained the breach, says operational and safety-critical systems were unaffected, and the compromised system held no bank or payment details. Supporters would argue that prompt containment, regulatory notification and clear advice about phishing risk are the practical priorities, particularly when parking and airport services must continue for travellers.
The case against
Critics would argue that the scale of the exposure makes this a serious failure of data stewardship, even without payment information. Email addresses, phone numbers, postcodes and vehicle registrations can help criminals craft convincing scams or link records across datasets, so customers may face lasting risks. They would say MAG should provide fuller transparency about how access was gained, how long data was exposed, and what concrete support and security improvements it will offer affected people.
Full account
Manchester Airports Group (MAG) has said a cyber-attack resulted in unauthorised access to personal data relating to about 8.7 million customers of Manchester, London Stansted and East Midlands airports. The affected information includes email addresses, telephone numbers, vehicle registration details and postcodes.
MAG said the compromised records were connected to bookings for parking, airport lounges and fast-track services, as well as registrations for airport Wi-Fi. It said neither the affected system nor the company held customers’ bank or payment-card information.
The airport operator said it contained the incident promptly, engaged specialist advisers and notified relevant authorities. It added that airport operations, including flights and parking services, had continued normally, and that the breach had not affected aviation security or passenger safety.
Customers have been urged to take care over unsolicited messages that claim to come from the airports, particularly requests for payment or banking information. MAG apologised for concern caused by the incident while saying it was taking steps to protect customers and its systems.
Where outlets differ
Source 2 says the attack occurred over the previous weekend and reports that the National Cyber Security Centre and Information Commissioner’s Office had been notified; Source 1 refers more generally to relevant authorities.
Source 2 says most of the exposed data was understood to concern terminal Wi-Fi registrations and includes passenger-volume context for the three airports. Source 1 places greater emphasis on the warning sent to Stansted customers about potential phishing.
Both reports agree on the scale and categories of data involved, the absence of payment information, and MAG’s statement that services and safety were unaffected.
More coverage
Business Companies Cybersecurity Software Technology UK World
Read the full article at the source →
Originally published by The Guardian as “UK airports operator hit by cyber-attack and customer data accessed”.