Manchester Airports Group (MAG) confirmed a cyberattack exposed the personal data of roughly 8.7 million customers across Manchester Airport, London Stansted Airport and East Midlands Airport. The breach was identified on August 27, 2026.
Stolen data included email addresses, postcodes and vehicle registration details, most of it tied to airport WiFi sign-ups, car-park bookings, lounge reservations and fast-track access services. MAG said no bank account or payment-card details were exposed, and that flight operations and aviation security were not affected.
The attackers demanded a ransom, which MAG refused to pay. The company says it has contained the breach, notified the UK Information Commissioner's Office, and is working with cybersecurity specialists to protect affected customers.