Cyberattack exposes data of nearly 8.7 million customers at three UK airports

A cyberattack targeting three major airports in the United Kingdom has resulted in the theft of personal data belonging to approximately 8.7

London: A cyberattack targeting three major airports in the United Kingdom has resulted in the theft of personal data belonging to approximately 8.7 million customers, raising fresh concerns over cybersecurity and the protection of sensitive passenger information.

The affected airports are Manchester Airport, London Stansted Airport and East Midlands Airport, all of which are operated by the Manchester Airports Group (MAG). The company confirmed that an unauthorised party had gained access to its systems and obtained certain customer information during the cyber incident.

According to Manchester Airports Group, the stolen information includes customers’ email addresses, telephone numbers, vehicle registration numbers and postcodes. The company said the compromised data was linked to a range of airport services used by customers.

The information reportedly relates to customers who had made bookings for airport car parking, airport lounges and fast-track services. Data belonging to people who had registered to use Wi-Fi services at the airports was also affected.

Manchester Airports Group announced the cybersecurity incident at approximately 1pm on Thursday, informing customers and relevant authorities about the breach. The incident has highlighted the growing risks faced by major transport hubs, which handle large volumes of personal and travel-related information every day.

A spokesperson for Manchester Airports Group said an unauthorised party had targeted the company’s systems in a cyberattack and had managed to obtain some customer data. The spokesperson stressed that the company took immediate action after identifying the threat and moved quickly to contain the incident.

The group said it had brought in cybersecurity specialists to assess the situation and implement measures aimed at protecting customers and its systems. The company is also working to determine the full extent of the incident and ensure that appropriate security measures remain in place.

MAG said that the relevant authorities had been notified about the cyberattack and that investigations were continuing in cooperation with them. The company is expected to work closely with cybersecurity experts and law enforcement agencies as the investigation progresses.

The breach has raised concerns because airports are increasingly dependent on digital systems for essential services, including passenger processing, parking reservations, Wi-Fi access, lounge bookings and fast-track facilities. A successful cyberattack against such systems can potentially expose large amounts of personal information and disrupt services.

Although the company said the immediate threat had been contained, the scale of the incident means affected customers may face an increased risk of phishing attempts, fraudulent messages or other forms of online exploitation. Customers whose information was involved are therefore likely to be advised to remain cautious when receiving unexpected emails, text messages or phone calls requesting personal or financial information.

Manchester Airports Group has assured customers that it is taking the matter seriously and is continuing to work with specialists and the relevant authorities. The company said protecting customer information and maintaining the security of its systems remain priorities as the investigation continues.

The incident serves as another reminder of the growing cybersecurity challenges facing major organisations and critical infrastructure operators. With millions of customers potentially affected, the investigation will now focus on how the attackers gained access, what information was taken and whether further security measures are required to prevent similar incidents in the future.