MAG breach hits 8.7M customers at three UK airports

Manchester Airports Group confirmed that an unauthorised third party accessed customer data tied to about 8.7 million people across Manchester, London Stansted and East Midlands airports. MAG's statement went out on 27 August 2026. The company says passenger safety, aviation security and airport operations were not affected, and parking services continue normally.

The incident is customer data, not a compromise of flight systems. Attackers gained access over the weekend of 22 to 23 August. MAG became aware on Tuesday 25 August and disclosed publicly on the 27th.

The data relates to car park, lounge and Fast Track bookings and in-airport Wi-Fi sign-ups. The fields accessed are email addresses, phone numbers, vehicle registrations and postcodes. Neither MAG nor the affected system stores bank or payment card details, the company says, so no financial data sat in the exposed set. The follow-on threat is phishing rather than card fraud.

In the vast majority of cases, The Record reports MAG saying, the only information accessed was a single email address, largely from travelers who signed in to the airports' Wi-Fi. The 8.7 million count is real, but the depth per record is shallow for most of it: a long list of email addresses, not a matched set of names, cards and itineraries. The smaller slice whose booking records carried the phone number, vehicle registration and postcode together is the deeper set.

MAG refused to pay the ransom the attackers demanded. The company says it contained the risk quickly, brought in specialist advisors, notified the authorities, and temporarily suspended its online Manage My Booking service. The UK's National Cyber Security Centre and Information Commissioner's Office were informed. MAG's refusal to pay means the stolen data may still surface.

MAG has not published a CVE or named the group behind it. The event is a confirmed data-theft incident with a refused extortion demand, not a ransomware lockout of airport systems.

Some offers on this page may be paid placements or contain affiliate links.