Manchester Airports Group has confirmed a cyberattack affecting 8.7 million customers, with contact and vehicle details exposed. Financial information remains secure, and flight operations continue without interruption. The company has suspended its online booking service as a precautionary measure while investigating the breach.
Manchester Airports Group (MAG), the operator of Manchester, London Stansted, and East Midlands airports, has reported a significant cyberattack that compromised the personal data of approximately 8.7 million customers. The breach, which the company discovered on Tuesday, August 25, 2026, involved unauthorized access to databases containing customer contact information.
According to the official statement, the exposed information includes email addresses, phone numbers, vehicle registration numbers, and postcodes of individuals who booked services such as airport parking, lounges, and Fast Track facilities, or registered for airport Wi-Fi. The company has confirmed that sensitive financial information, including bank account details and payment card numbers, was not accessed during the incident.
From an operational standpoint, the breach has not disrupted airport services. Flight schedules, security protocols, and general airport operations continue to function normally. As a direct response to the security alert, the group has temporarily suspended its 'Manage My Booking' online service to prevent further unauthorized activity while security teams conduct a thorough investigation and harden system defenses.
The incident highlights the ongoing cybersecurity risks facing large-scale infrastructure operators and companies that handle massive consumer databases. For businesses and investors, this event underscores the operational and reputational risks associated with digital security. Beyond the immediate containment efforts, the company faces the possibility of intense regulatory scrutiny regarding its data protection compliance. Such reviews often focus on whether the firm's cybersecurity measures met required standards at the time of the breach.
While the company works with cybersecurity experts and authorities to manage the situation, the main monitorable for stakeholders will be the potential for long-term reputational impact and any subsequent regulatory penalties. The company has begun the process of notifying affected individuals and is advising them to remain vigilant against potential phishing attempts that could leverage the stolen contact data.