UK airport group confirms data breach affecting millions of customers

Manchester Airports Group has confirmed that a cyber security incident resulted in the unauthorised access of customer data for approximately 8.7 million individuals. The breach affected passengers at Manchester, East Midlands and London Stansted airports. Criminal hackers accessed the information over the weekend and subsequently demanded a ransom fee for its return, a demand the group stated it refused to pay. The specific amount of the ransom was not disclosed.

The airport operator said it became aware of the intrusion on Tuesday and immediately contained the risk. It reported that the hackers were prevented from gaining any further access to the systems. The group stated that it has been working with specialist advisors and relevant authorities to protect its customers and infrastructure. While the identity of the hackers is known to the company, no further details were provided. The Information Commissioner’s Office confirmed it had received a breach report from the group and is currently assessing the information provided to determine the next steps.

MAG clarified that at no point was passenger safety or aviation security compromised. The systems targeted did not hold customer bank or payment details. The majority of the accessed data consisted of email addresses linked to WiFi sign-ups within the airport terminals. More detailed information, including vehicle registrations and postcodes, was obtained from customers who had booked car-park spaces, arranged lounge access or used fast-track services. The company apologised for any inconvenience or concern caused and emphasised its commitment to the security of customer information.

Customers are being urged to remain vigilant against suspicious emails, text messages or phone calls and to avoid opening unknown attachments. Michael Goddard, a resident of Cheshire, said he and his wife had received notification emails regarding the breach. He described the situation as alarming, noting that the combination of his name and postcode could allow the hackers to identify him. Although he acknowledged the assurances provided by the airport group, he expressed a lack of full reassurance and stated that he and his wife wanted guarantees of adequate compensation should any negative consequences arise from the data theft.

The incident highlights ongoing concerns regarding digital security in the aviation sector. The airport group continues to work with authorities to manage the fallout from the breach. Support for individuals concerned about the data compromise is available through the Information Commissioner’s Office website. The company has not indicated when the investigation will be concluded or if further updates will be provided to the public.