Manchester Airports Group (MAG) confirmed on August 27 that an unauthorized third party obtained customer data tied to car park, lounge and Fast Track bookings and in-airport Wi-Fi sign-ups at Manchester, Stansted and East Midlands airports, including email addresses, phone numbers, vehicle registrations and postcodes [1]. The BBC reported that data of about 8.7 million customers was accessed and that hackers demanded a ransom MAG refused to pay; MAG says the system held no bank or payment details and airport operations and aviation security were unaffected [1][2]. Customers should stay alert to suspicious emails, texts and calls and avoid opening unknown attachments [2].
UK's Manchester Airports Group hit by intrusion and ransom demand; contact data of about 8.7 million customers at Manchester, Stansted and East Midlands obtained
1 min read
- Disclosed
- Aug 27, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- Scale
- 8,700,000 people[2]
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Transportation & logistics
What to do nowOur advice
- Stay alert to suspicious emails, texts and calls, and avoid opening unknown attachments [2].
- Watch for scams using leaked email addresses, phone numbers, vehicle registrations and postcodes .
Timeline
Technical details
Remediation
Vendor guidance
- 1Watch for scams detect[2]
Be wary of suspicious emails, texts and calls, and avoid opening unknown attachments.
References
Official / primary1
- [1]
“A quantity of customer data has been obtained that relates to car park, lounge and Fast Track bookings and in-airport WIFI sign-ups at Manchester, Stansted and East Midlands airports.”
Media1
- [2]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.