Manchester Airports Group says hackers stole travelers' data
Manchester Airports Group confirms hackers stole customer data from Wi-Fi sign-ups and bookings.
Run Manchester Airports Group?
Get an email when a reviewed story names Manchester Airports Group, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Manchester Airports Group (MAG) has disclosed a data breach where hackers accessed customer information, including Wi-Fi sign-ups, car park, lounge, and Fast Track bookings. The compromised data includes email addresses, phone numbers, vehicle registration numbers, and postcodes, but not payment details. Airport operations remain unaffected, though MAG has temporarily suspended its online booking service.
The lesson from this incident
Full lessonHackers gained unauthorized access to Manchester Airports Group's customer-facing systems, exfiltrating personally identifiable information (PII) such as email addresses, phone numbers, vehicle registrations, and postcodes. The breach highlights the risks of storing large volumes of customer data in systems that may lack sufficient access controls and monitoring. While payment data was spared, the exposed PII is valuable for phishing, identity fraud, and targeted social engineering attacks. The suspension of online booking services further underscores the operational and reputational cost of failing to adequately protect customer data repositories.
What helps against this
How we list vendors- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.