Full Breakdown
Manchester Airports Group Cyber Attack Exposes Data of 8.7 Million Customers
8/27/2026, 9:14:18 PM
Incident Overview
A cyber intrusion targeting Manchester Airports Group (MAG)—the operator of Manchester Airport, London Stansted and East Midlands Airport—was discovered on August 25. The breach, believed to have occurred several days earlier, allowed an unauthorised third party to access personal information linked to car-park, lounge and Fast-Track bookings as well as on-site Wi-Fi sign-ups across all three airports. The compromised data set includes customers’ email addresses, telephone numbers, vehicle registration numbers and postcodes. MAG confirmed that no bank or payment details were stored in the affected system.
Background & Context
MAG manages three of the United Kingdom’s busiest airports, serving a combined 66.3 million passengers in the 12-month period ending March 31 2026. Annual passenger volumes are roughly 32 million at Manchester Airport, 30 million at London Stansted and 4 million at East Midlands Airport. The airports’ ancillary services—parking, lounge access and Fast-Track—require travelers to provide contact details, creating sizable customer databases that are attractive targets for cyber criminals.
Data & Statistics
- Customers affected: approximately 8.7 million individuals.
- Data types accessed: email addresses (majority), phone numbers, vehicle registrations, postcodes.
- Financial information: none of the breached records contained bank or payment details.
- Ransom demand: hackers requested a payment for the return of the data; the amount was not disclosed.
Official Statements & Responses
The group asserted that airport operations, including flight schedules and parking services, continued without disruption.
In its response, MAG said it “immediately contained the risk” and engaged cyber-security specialists and relevant authorities to secure the affected system. Customers were advised that no further action was required on their part, but they were urged to remain vigilant for unsolicited emails, calls or text messages that might attempt phishing or fraud. The organisation emphasized that it would never contact customers unexpectedly to request payment or banking information.
Verbatim Quotes
- “Manchester Airports group has been subject to a cyber security incident by an unauthorised third party.” — MAG spokesperson
These statements collectively illustrate MAG’s rapid containment measures, cooperation with law-enforcement agencies, and reassurance to the travelling public that core airport functions remain safe and operational.
