Manchester Airports Group Confirms Cyber Security Incident Affecting Customer Data

Manchester Airports Group (MAG), the owner of Manchester Airport, East Midlands Airport and London Stansted Airport, has confirmed it has been the target of a cyber security incident in which a quantity of customer data was obtained by an unauthorised third party.

What Has Happened?

MAG says the data obtained relates to car park, lounge and Fast Track bookings and in-airport WIFI sign-ups across its three airports: Manchester, East Midlands and Stansted. The group states that it immediately contained the risk, is working with specialist advisers, and has informed and is working with the relevant authorities.

Importantly, MAG stresses that at no point has passenger safety or aviation security been compromised, and that the incident has not caused any operational disruption. Airports are running normally and parking services continue to operate as usual.

What Data Was Accessed?

According to MAG, neither the group nor the system accessed hold customers' bank or payment details. The data that has been accessed includes:

• Email addresses
• Phone numbers
• Vehicle registrations
• Postcodes

Will My Booking Be Affected?

MAG says all upcoming bookings remain valid and are unaffected, so there is no action required for your travel plans. As a precaution, the group has temporarily suspended access to its online Manage My Booking service. If you need to change a booking due within the next 72 hours, MAG asks customers to contact its Customer Services team on 0208 163 8001 (Monday to Friday, 9:00 to 17:00, excluding bank holidays). The group warns that call wait times may be longer than usual.

How to Protect Yourself

MAG has contacted affected customers directly and urges everyone to be particularly cautious of unexpected emails, calls or text messages claiming to be from the airport group. Its advice is to follow standard cyber security good practice:

• Remain vigilant for suspicious emails, text messages or phone calls.
• Avoid clicking on links or opening attachments in unexpected messages.
• Never share payment card details, banking information or passwords in response to an unexpected request.

MAG has confirmed it will never contact you unexpectedly to ask for payment or banking information. If you receive a message that does, treat it as a scam.

What MAG Is Doing

The group says that on becoming aware of the incident it took immediate steps to contain it, including restricting access to affected systems, engaging specialist cyber security experts and notifying the relevant authorities. Its Data Protection team is overseeing the response to ensure that all actions are appropriate, thorough and in line with the group's legal obligations.

A MAG spokesperson said: "Manchester Airports Group has been subject to a cyber security incident by an unauthorised third party. We would like to reassure customers that Manchester Airports Group takes the security of customer information extremely seriously and we apologise for any inconvenience or concern caused."

Is There Any Risk to Airport Operations?

No. MAG confirms the incident does not involve operational airport systems and has no impact on flights or airport operations at any of its sites. Passengers should continue to travel to the airport as normal. You can still check live flight information on our Manchester departures and arrivals boards, along with the equivalent pages for Stansted and East Midlands.

More Information

MAG has published full details and a set of frequently asked questions on its official website. For the latest guidance, see the Manchester Airport data security incident page. For general advice on responding to a data breach, individuals can also seek support from the relevant UK data protection authorities.

The Short Version

MAG has confirmed a cyber security incident affecting customer data from car park, lounge and Fast Track bookings and WIFI sign-ups at Manchester, East Midlands and Stansted. Email addresses, phone numbers, vehicle registrations and postcodes were accessed, but no bank or payment details. Bookings remain valid, airports are operating normally, and customers are urged to stay alert to scam messages. Plan the rest of your trip with our guides to Manchester, East Midlands and Stansted airports.