Cyber Attack Exposes Data of 8.7 Million MAG Customers

The Manchester Airports Group (MAG) confirmed on August 27, 2026, that an unauthorized third party executed a cyber attack affecting Manchester, London Stansted, and East Midlands airports. The breach exposed the personal data of approximately 8.7 million customers, including email addresses, phone numbers, vehicle registrations, and postcodes.

The compromised information was linked to in-airport WIFI sign-ups and bookings for lounges, car parks, and Fast Track services. MAG stated that bank and payment details were not stored in the affected system and were not accessed. The company reported that passenger safety and aviation security remained uncompromised, and flight operations continued without disruption.

While general airport operations and parking services remained functional, the company temporarily suspended its 'Manage My Booking' online service. MAG stated it became aware of the incident on Tuesday and has since contained the risk. The organization is currently working with specialist cyber security advisors and relevant authorities. Customers have been advised to remain vigilant against suspicious emails, calls, or text messages claiming to be from the group.