Manchester Airports Group Reports Cyber Incident Affecting Customer Data

Manchester Airports Group (MAG), which operates Manchester, Stansted, and East Midlands airports, has disclosed a significant cyber incident. An unauthorized third party gained access to customer data, impacting information associated with bookings and airport Wi-Fi registrations.

The full scope and the precise methods used by the attackers are still under investigation. MAG has stated that the incident is being thoroughly examined to understand the extent of the breach and to identify any specific vulnerabilities exploited. The group is working with cybersecurity experts to manage the situation and enhance its security measures.

While the investigation is ongoing, MAG has not yet specified the exact nature of the customer data compromised. However, the mention of bookings and Wi-Fi registrations suggests that personal details such as names, contact information, and potentially travel-related data could be involved. The group has not confirmed if financial information was accessed.

MAG has initiated a review of its security protocols and is implementing additional measures to prevent future incidents. The company is also coordinating with relevant authorities and regulatory bodies as the investigation progresses. The focus remains on securing systems and protecting customer information.

This incident highlights the persistent threat of cyberattacks against critical infrastructure and large organizations. Airports, handling vast amounts of sensitive personal and operational data, are attractive targets for malicious actors. The breach underscores the ongoing need for robust cybersecurity defenses and rapid incident response capabilities within the aviation sector.

MAG has not yet provided a timeline for when customers will be notified or what specific steps individuals should take. The company has advised customers to remain vigilant for any suspicious communications that may appear to originate from MAG or its associated services. Further updates are expected as the investigation yields more information.

The Register reports that the cybersecurity incident at Manchester Airports Group (MAG) has led to the theft of customer data including email addresses, phone numbers, vehicle registrations, and postcodes. While MAG stated that passenger safety and aviation security were not compromised and no payment details were stolen, the breach affected data from car parking, lounge, fast track bookings, and public Wi-Fi services. The company is working with authorities and has advised customers to be vigilant against phishing attempts.

The cyberattack on Manchester Airports Group (MAG) has been further detailed, revealing that approximately 8.7 million customers had their data exposed. While the exact timeframe of the breach was not specified, MAG confirmed that in most instances, only email addresses were accessed. The compromised data includes email addresses, phone numbers, vehicle registrations, and postcodes, though the company stressed that no financial or payment card data was exposed. MAG has temporarily suspended its online Manage My Booking service as a precautionary measure.