Manchester Airports Group issues statement following cyberattack

Manchester Airports Group (MAG) has issued a statement after a cyberattack accessed the data of 8.7 million customers of its three UK airports.

The airport operator, which runs London Stansted and East Midlands airports as well as Manchester Airport, revealed hackers accessed customer information related to airport WiFi sign-ups, parking and lounge bookings. Bank details were not compromised, nor did the attack post any threat to passenger safety or security at its airports. A ransom was demanded following the attack, but this was not paid by MAG.

Customers affected by the cyberattack have been contacted by MAG, and the data breach has been reported to the UK’s data protection regulator, the Information Commissioner’s Office, which is assessing the incident.

A MAG spokesperson said:

“Manchester Airports Group has been subject to a cyber security incident by an unauthorised third party. A quantity of customer data has been obtained that relates to car park, lounge and Fast Track bookings and in-airport WIFI sign-ups at Manchester, Stansted and East Midlands airports.

“We immediately contained the risk and have been working with specialist advisors and taking appropriate steps to protect our customers and systems. We have informed and are working with the relevant authorities. At no point has passenger safety or aviation security been compromised.

“The incident has not resulted in any operational disruption. Airport operations remain unaffected and customer parking services continue to operate normally.

“Neither MAG nor the system accessed hold customers’ bank or payment details. The data that has been accessed includes customers’ email addresses, phone numbers, vehicle registrations and postcodes.

“We would like to reassure customers that Manchester Airport Group takes the security of customer information extremely seriously and we apologise for any inconvenience or concern caused.”