Data Breach Affects Millions at Three UK Airports After Cyber Attack

A recent cyber security incident has led to the compromise of personal data belonging to approximately 8.7 million customers across three prominent UK airports, as confirmed by the Manchester Airports Group (MAG). The group, which manages Manchester Airport, London Stansted, and East Midlands Airport, disclosed that an unauthorised third party gained access to customer information. However, MAG was quick to reassure the public that airport operations and aviation security protocols remained entirely uncompromised.

In a statement released on Thursday, August 27, a MAG spokesperson elaborated on the situation: “Manchester Airports Group has experienced a cyber security incident orchestrated by an unauthorised third party.” The spokesperson further explained that “a quantity of customer data has been obtained that relates to car park, lounge and fast track bookings and in-airport wifi sign-ups at Manchester, Stansted and East Midlands airports.” The group asserted that they immediately contained the risk and have been actively collaborating with specialist advisers, implementing necessary measures to safeguard their customers and systems. “We have informed and are working with the relevant authorities. At no point has passenger safety or aviation security been compromised. The incident has not resulted in any operational disruption. Airport operations remain unaffected and customer parking services continue to operate normally,” the spokesperson added.

The company specified that the accessed information included customers’ email addresses, phone numbers, vehicle registration numbers, and postcodes. It was noted that the majority of this affected data originated from email addresses provided by customers when registering for Wi-Fi services at the airports. Crucially, MAG confirmed that neither its own internal systems nor the specific system targeted by the attacker stored customers’ banking or payment details. “Neither Mag nor the system accessed hold customers’ bank or payment details,” the spokesperson reiterated. “The data that has been accessed includes customers’ email addresses, phone numbers, vehicle registrations and postcodes. We would like to reassure customers that Manchester Airport Group takes the security of customer information extremely seriously and we apologise for any inconvenience or concern caused.”

Last year, Manchester Airport alone served over 32 million passengers, while Stansted processed approximately 30 million, and East Midlands Airport handled around four million travellers. MAG has officially reported the incident to the appropriate authorities and is continuing its response efforts in conjunction with specialist advisers.