The Manchester Airports Group data breach has exposed personal information belonging to millions of customers, with hackers stealing records tied to Wi-Fi sign-ups, car park bookings, lounge reservations, and Fast Track services across Manchester, London Stansted, and East Midlands airports. Payment details were not among the compromised data, and airport operations have continued without disruption throughout the incident.
The stolen records include customers’ email addresses, phone numbers, vehicle registration numbers, and postcodes. MAG confirmed it had moved swiftly to contain the intrusion: restricting access to affected systems, bringing in external experts, and notifying law enforcement. As a precautionary measure, the company has temporarily suspended its online ‘Manage My Booking’ service, redirecting customers to its phone line in the interim.
How Many Customers Were Affected by the Manchester Airports Group Data Breach?
The scale of the exposure is considerable. Local media had reported that data belonging to up to 8.9 million travellers may have been accessed, citing private MAG statements, though MAG itself has not publicly confirmed a figure. BBC News reported the number of affected customers as about 8.7 million, a figure that, if accurate, would make this one of the larger consumer data exposures seen at a UK transport operator in recent years.
The BBC also reported that the Information Commissioner’s Office said it was assessing the incident. The ICO is the UK’s data protection regulator, and organisations that suffer a personal data breach are required to notify it; whether the assessment leads to a formal investigation or enforcement action remains to be seen. No ransomware or data extortion group had publicly claimed responsibility for the attack at the time of writing.
What Data Was Taken, and What Should Customers Do?
MAG operates Manchester, London Stansted, and East Midlands airports, which together handle over 66 million passengers annually. The group employs 40,000 people and generates annual revenue of £1.5 billion, making it the UK’s largest airport operator. The breadth of its customer database (spanning everything from terminal Wi-Fi users to pre-booked parking customers) explains why a single breach could affect so many individuals across three separate sites.
The compromised details stop short of financial data. MAG has been explicit on this point, stressing that it will never ask customers for payment card information, banking details, or passwords. Anyone receiving a communication that requests such information should treat it as fraudulent and report it to the relevant authorities.
Customers who may have been affected are advised to stay alert for suspicious emails or SMS messages and to avoid clicking on links in unexpected communications. MAG says it has been contacting impacted individuals directly, though the company has not publicly disclosed the precise number of people notified.
For broader guidance on staying safe after a data breach, the National Cyber Security Centre has published post-breach recommendations covering steps such as changing passwords, enabling two-factor authentication, and monitoring accounts for unusual activity. MAG has pointed its customers towards that guidance.
With the ICO now assessing the incident and no attacker having come forward publicly, the immediate questions centre on how the intrusion occurred and how long the attackers had access before MAG detected the breach. The company has not provided a timeline for when the ‘Manage My Booking’ service will be restored.
