Manchester Airports Group Hit by Cybersecurity Breach, Customer Data Exposed
Manchester Airports Group (MAG), which operates Manchester, London Stansted, and East Midlands airports, has confirmed a cybersecurity incident involving unauthorized access to customer data. The breach affects information collected through car park, lounge, and Fast Track bookings, as well as in-airport WiFi registrations.
MAG detected the incident swiftly and took immediate steps to contain its impact, engaging cybersecurity specialists and notifying relevant authorities. While passenger safety, aviation security, and airport operations remain unaffected, the exposed data includes customer email addresses, phone numbers, vehicle registrations, and postcodes though no payment or banking details were accessed.
As a precaution, MAG has temporarily suspended its online Manage My Booking service, directing customers with urgent changes to contact its customer service team by phone. Those with bookings within the next 72 hours may experience longer wait times, while all other reservations remain valid. MAG has directly notified affected customers and advised vigilance against phishing attempts, emphasizing that it will never request sensitive information via unsolicited communications.
The incident underscores the growing cybersecurity risks facing the aviation sector, with MAG’s Data Protection team leading the response in compliance with legal obligations. The group has reiterated its commitment to safeguarding customer data while investigations continue.
Manchester Airports Group TPRM report: https://www.rankiteo.com/company/manchester-airports-group
"id": "man1787835222",
"linkid": "manchester-airports-group",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Customers with car park, '
'lounge, Fast Track bookings, '
'and in-airport WiFi '
'registrations',
'industry': 'Aviation',
'location': 'United Kingdom',
'name': 'Manchester Airports Group (MAG)',
'type': 'Airport Operator'}],
'customer_advisories': 'Advised vigilance against phishing attempts; '
'emphasized no requests for sensitive information via '
'unsolicited communications',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'Personally identifiable information '
'(PII)',
'type_of_data_compromised': ['Email addresses',
'Phone numbers',
'Vehicle registrations',
'Postcodes']},
'description': 'Manchester Airports Group (MAG), which operates Manchester, '
'London Stansted, and East Midlands airports, has confirmed a '
'cybersecurity incident involving unauthorized access to '
'customer data. The breach affects information collected '
'through car park, lounge, and Fast Track bookings, as well as '
'in-airport WiFi registrations.',
'impact': {'data_compromised': 'Customer email addresses, phone numbers, '
'vehicle registrations, and postcodes',
'identity_theft_risk': 'Potential phishing attempts',
'operational_impact': 'Temporarily suspended online booking '
'service; longer wait times for customers '
'with bookings within the next 72 hours',
'payment_information_risk': 'No payment or banking details were '
'accessed',
'systems_affected': 'Online *Manage My Booking* service'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Cyber incident description'}],
'regulatory_compliance': {'regulatory_notifications': 'Compliance with legal '
'obligations'},
'response': {'communication_strategy': 'Direct notifications to affected '
'customers; advisories against '
'phishing attempts',
'containment_measures': 'Immediate steps to contain impact; '
'temporary suspension of *Manage My '
'Booking* service',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Relevant authorities notified',
'third_party_assistance': 'Cybersecurity specialists engaged'},
'title': 'Manchester Airports Group Hit by Cybersecurity Breach, Customer '
'Data Exposed',
'type': 'Data Breach'}