UK airport operator confirms data breach affecting 8.7 million customers

Manchester Airports Group (MAG), which operates Manchester, Stansted, and East Midlands airports, has confirmed a significant cybersecurity incident resulting in the theft of customer data.

The attack, described by MAG as a sophisticated hack rather than a human error, did not involve ransomware and did not compromise passenger safety or operational security. The breach is believed to have affected approximately 8.7 million customers, with the majority of compromised data being email addresses according to The Register.

These emails were primarily collected during sign-ups for public Wi-Fi services, with smaller amounts of data originating from incomplete booking inquiries for services like car parking and Fast Track, and even fewer from completed bookings. No bank or payment details were stored on the affected third-party hosted database.

While MAG has not paid any ransom, they have informed relevant authorities, including the Information Commissioner’s Office. As a precaution, the company temporarily revoked access to its Manage My Booking service. Affected customers have been notified and are advised to be vigilant against potential phishing attempts.

Source: The Register

Written by

Kelley Damore Chief Content Officer CyberRisk Alliance

Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.