UK Travel Alert Manchester Airports Group Data Breach Exposes 8.7 Million Customer Records

Image generated with Ai

Manchester Airports Group suffered a large data breach exposing information related to some 8.7 million customers that used Manchester, Stansted or East Midlands Airport. The breach affects data related to passengers who used the parking, lounge, Fast Track, or even airport WiFi. MAG says the breach does not impact flights or passengers, aviation security, and airport operations. MAG’s computer systems detected the breach on August 25, 2026, and secured all affected systems. MAG then called in cyber security experts and government agencies for assistance to conduct their own investigation.

Millions of Airport Customers Affected After Unauthorised System Access

A cyber intrusion targeting Manchester Airports Group has resulted in the exposure of customer information from three of the UK’s busiest airports. The breach involved systems connected with passenger services rather than the core technology used to run airport operations.

MAG operates Manchester Airport, London Stansted Airport and East Midlands Airport, serving millions of travellers every year. The affected customer information was linked to services passengers use before departure, including airport parking facilities, premium airport lounges, Fast Track security options and Wi-Fi access inside terminals.

The airport group identified suspicious activity after an unauthorised party gained access to certain customer-related systems. Once the incident was discovered, MAG immediately restricted access to the affected platforms and launched a detailed security review.

Specialist cybersecurity advisers were brought in to support the investigation and help strengthen protection measures. MAG also informed relevant authorities as part of the official response process.

The company publicly confirmed the breach on 27 August 2026 after taking steps to contain the incident and reduce further risks.

Email Addresses Form Largest Part of Compromised Information

Although approximately 8.7 million customer records were involved, MAG confirmed that the majority of exposed information was limited to email addresses.

Many of these records came from passengers who had registered for Wi-Fi services at airport terminals. These registrations generally required only basic contact information.

However, some customers had additional details exposed because they had used other airport services. Information linked to parking bookings, lounge reservations and Fast Track services could include telephone numbers, vehicle registration details and postcodes.

MAG stressed that the breach did not expose customers’ financial information. Payment card details, banking information and other sensitive financial data were not stored within the affected systems and were not accessed by attackers.

The airport operator also confirmed that the compromised systems were separate from operational platforms responsible for managing airport activities.

Ransom Demand Rejected as MAG Strengthens Security Response

The cyberattack included a ransom demand from the attackers, according to MAG. The airport group confirmed that it refused to pay the requested amount.

Details about the attackers, including their identity and the size of the ransom demand, have not been released.

Following the incident, MAG focused on containing the breach, investigating the method of access and protecting customer information. Cybersecurity specialists are continuing to examine the affected systems.

The airport operator is also cooperating with government bodies, including the UK’s National Cyber Security Centre, to support the investigation.

MAG said it took immediate action after identifying the threat and introduced additional security measures to protect its systems and customers.

Passenger Flights and Airport Services Continue Normally

Despite the scale of the data breach, MAG confirmed that airport operations continued without disruption.

Passengers travelling through Manchester Airport, London Stansted Airport and East Midlands Airport experienced no impact on flight schedules or aviation security arrangements.

The attack did not affect aircraft operations, airport safety procedures or essential airport infrastructure.

Customers with existing bookings for parking, lounges or Fast Track services can continue using those arrangements as planned.

However, MAG temporarily paused its online Manage My Booking service while security checks were carried out. The temporary restriction was introduced as a precaution rather than because of operational failure.

Passengers with bookings within 72 hours who needed assistance were advised to contact customer service teams directly. MAG also provided flexibility for customers who wanted to cancel or change plans because of concerns related to the cyber incident.

Travellers Warned About Fake Airport Messages After Data Leak

Following the breach, MAG warned passengers about the possibility of phishing attempts using stolen customer details.

Cybercriminals could use exposed email addresses, phone numbers and travel-related information to create convincing fake messages pretending to come from airports or travel companies.

Passengers have been advised to carefully check unexpected emails, text messages and phone calls. MAG warned customers not to open suspicious attachments, click unknown links or provide personal security information.

The airport operator confirmed that it would never unexpectedly ask passengers to provide passwords, payment card details or banking information.

Security experts often warn that even limited personal information can be valuable to criminals because it can help create targeted scams that appear genuine.

Major UK Airport Operator Faces Growing Digital Security Pressure

The breach highlights the increasing cybersecurity challenges facing the aviation sector as airports become more dependent on digital passenger services.

MAG is one of the largest airport groups in the UK. Its three airports handled more than 66 million passengers during the financial year ending March 2026.

Manchester Airport achieved a record 32.3 million passengers during the period, while London Stansted surpassed 30 million annual passengers for the first time. East Midlands Airport handled around four million passengers.

Together, MAG’s airports connect travellers to 284 destinations worldwide and represent around one-fifth of UK air passenger traffic.

The growing use of online bookings, mobile services and digital airport platforms has improved passenger convenience but has also increased exposure to cyber threats.

MAG Breach Adds to Global Aviation Cybersecurity Concerns

The latest incident comes as airports and aviation companies worldwide face increasing cyber risks.

In 2025, a cyberattack involving Collins Aerospace passenger processing systems affected check-in and boarding services at several European airports, including Heathrow.

However, the MAG incident differs because the airport group confirmed that operational systems remained secure and flights continued normally.

The breach demonstrates the importance of protecting passenger information as airports expand digital services. Personal data security has become a critical part of modern aviation management alongside safety, infrastructure and operational reliability.

MAG said its investigation remains ongoing and encouraged passengers to remain cautious while travelling through Manchester Airport, London Stansted Airport and East Midlands Airport.