Manchester Airports Group Says Hackers Stole Customer Data

· Original article ↗

Summary

Manchester Airports Group says hackers stole customer contact and booking data across three airports. Payment details and airport operations were unaffected; the company suspended Manage My Booking and notified law enforcement.

Key points

  • MAG said hackers breached its systems and stole data associated with Wi-Fi sign-ups and car park, lounge, and Fast Track bookings at Manchester, Stansted, and East Midlands airports.
  • The affected information included email addresses, phone numbers, vehicle registration numbers, and postcodes.
  • MAG said payment details were not accessed and airport operations were not disrupted.
  • The company temporarily suspended its Manage My Booking service and directed customers to use its phone line.
  • MAG said it restricted access to affected systems, engaged external experts, notified law enforcement, and contacted impacted customers.
  • Local media reported that up to 8.9 million travelers may have been affected, citing private MAG statements; BleepingComputer said it could not confirm the figure.
  • MAG advised customers to watch for suspicious messages and phishing attempts. No ransomware or data extortion group had publicly claimed the attack at the time of publication.

Article Details

Victim Organization
Manchester Airports Group (MAG)
Incident Type
System breach and theft of customer data
Data Types Exposed
  • Email addresses
  • Phone numbers
  • Vehicle registration numbers
  • Postcodes
Affected Records
The number of affected individuals was not disclosed by MAG. Local media reported that up to 8.9 million travelers may have been affected, citing private MAG statements; BleepingComputer could not confirm the figure.
Operational Impact
MAG said airport operations were unaffected and customer parking services continued normally. It temporarily suspended its online “Manage My Booking” service as a precaution.
Ransom Or Extortion
No ransomware or data extortion group had publicly claimed the attack at the time of reporting.
Claim Status
confirmed