Manchester Airports Group Confirms Data Theft From Wi-Fi Sign-ups and Booking Systems
Hackers pulled email addresses, phone numbers and car registrations from MAG's systems. Payment details were not touched, and flights are running normally.
Key points
- Manchester Airports Group (MAG), which runs Manchester, London Stansted and East Midlands airports, said hackers broke into its systems and stole customer data.
- Stolen data includes airport Wi-Fi sign-ups plus car park, lounge and Fast Track booking details: emails, phone numbers, vehicle registrations and postcodes.
- Payment card data was not accessed and flight operations are unaffected, the company said.
- MAG has temporarily switched off its online "Manage My Booking" page and is pushing customers to the phone line.
- Local UK media put the number of affected travellers as high as 8.9 million, a figure MAG has not publicly confirmed.
MAG, the UK's biggest airport operator, told customers on Tuesday that intruders got into its systems and made off with personal data tied to Wi-Fi logins and pre-travel bookings. It serves more than 66 million passengers a year across its three airports.
The stolen records cover Wi-Fi sign-up data alongside parking, lounge and Fast Track security pass bookings. Criminals took email addresses, phone numbers, postcodes and, for parking customers, vehicle registration numbers.
Payment card details were not in the pile, according to the company. Check-in and parking operations are running normally.
What actually got stolen?
Contact and travel-admin data, not financial data. Think of the details you type into a website to book a parking bay or connect to airport Wi-Fi: name, email, mobile number, postcode and the car's number plate.
MAG has not said how the hackers got in, how long they were inside, or how many people are affected. UK outlets have reported a figure of up to 8.9 million travellers, citing private company briefings, but BleepingComputer said it could not verify that number, and neither can Threat Vectr.
No ransomware crew or extortion group has publicly claimed the attack.
Should travellers be worried?
Be alert, but don't panic. The stolen data is exactly the raw material for convincing phishing attempts: fake emails or texts that name-drop your recent parking booking or car registration to appear legitimate. Our earlier reporting on Friday afternoon email fraud showed how quickly criminals weaponise personal details lifted from breached systems.
Don't click links in unexpected emails or texts. Go to the airport's website directly if you need to check a booking.
MAG said it will never ask for card details or passwords by email or phone. Anyone getting a message that does ask should refuse and report it. The UK's National Cyber Security Centre publishes step-by-step post-breach advice, and MAG is pointing customers there.
What has MAG done so far?
Once it spotted the intrusion, MAG locked down the affected systems, brought in outside investigators and told law enforcement. It has also emailed the people it believes were caught up in the theft.
"Manage My Booking" is offline for now. Customers needing to change a reservation are being asked to call instead.
| Detail | What MAG has said |
|---|---|
| Airports affected | Manchester, London Stansted, East Midlands |
| Data stolen | Emails, phone numbers, postcodes, vehicle registrations |
| Payment data | Not accessed |
| Operational impact | None; flights and parking running normally |
| Online booking management | Temporarily suspended |
| Reported scale (unconfirmed) | Up to 8.9 million travellers |
MAG employs 40,000 staff and reports annual revenue of £1.5 billion. The scope of exposure is large, and the real customer count may only become clear once external investigators finish their work. Watch this one: without a confirmed figure from MAG, the 8.9 million number is doing a lot of heavy lifting in the coverage so far.
