Manchester Airports Group breach exposes about 8.7 million customers; stolen data published
Attackers stole customer data from Manchester, Stansted and East Midlands airport services and later published it. MAG says everyone affected has been told. Watch for convincing booking-related scams; existing bookings remain valid.
Watch for unexpected emails, texts or calls about airport bookings, and avoid their links and attachments. Verify requests through the airport's website or a contact number you find independently; MAG says it will never unexpectedly request card details, banking information or passwords. Existing bookings remain valid, so you do not need to cancel or rebook because of the breach.
What’s happening
Manchester Airports Group disclosed a customer-data theft on 27 August affecting parking, lounge and Fast Track bookings and airport Wi-Fi registrations at Manchester, London Stansted and East Midlands. Initial reporting put the number affected at about 8.7 million customers; Have I Been Pwned later listed 8.8 million email addresses. MAG confirms exposure of email addresses, phone numbers, vehicle registrations and postcodes, and says the accessed system held no bank or payment details. BleepingComputer also verified booking and purchase information in a sample. FulcrumSec claimed responsibility and subsequently published stolen data, although its claims about the full scope and entry method remain unverified. MAG says it contained the incident and notified everyone affected, including customers with upcoming bookings. Airport operations continued. As at 3 November, MAG says it is still working with authorities; its public statement does not identify the entry point. There is no customer software update to install, and containment does not reverse the publication of personal information.
- What
- Breach
- Affects
- Manchester Airports Group parking, lounge, Fast Track and Wi-Fi services
- Fixed in
- Nothing to patch
- Since
- 27 Aug 2026
Timeline
- Update
As at 3 November, MAG's undated updated statement says all affected customers have been informed and notified customers' data was made public. It says the incident was contained, work with authorities continues and bookings remain valid.
- Update
BleepingComputer updated its report to confirm that FulcrumSec had published the stolen data. MAG told the publication it had contacted affected customers, including people with upcoming bookings, but declined to address the group's specific claims.
- Update
Have I Been Pwned added the breach, listing 8.8 million affected email addresses. That differs from the approximately 8.7 million customers reported initially; its entry also identifies booking history and other personal information.
- Update
FulcrumSec claimed responsibility. BleepingComputer verified one traveller's purchase history in a sample, but could not independently verify the claimed total dataset size, access method or extent of future-travel records.
- Made publicNothing to patch
MAG disclosed stolen customer information associated with parking, lounges, Fast Track and airport Wi-Fi at Manchester, London Stansted and East Midlands. It said airport operations, passenger safety and aviation security were unaffected.
- Update
ITPro later reported that MAG discovered the intrusion on 25 August and stopped further access. The report said the attack was believed to have begun over the preceding weekend.
Sources
- Data Security Incident – statement and updated FAQsManchester Airports Group · 27 Aug 2026
- MAG statement on cyber security incidentManchester Airports Group · 27 Aug 2026
- Manchester Airports Group attack: Everything we know so far as 8.7 million customers impacted in breachITPro · 28 Aug 2026
- Manchester Airports Group says hackers stole travelers' dataBleepingComputer · 27 Aug 2026
- FulcrumSec claims Manchester Airports hack, theft of 86 GB of dataBleepingComputer · 30 Aug 2026
- Manchester Airports Group Data BreachHave I Been Pwned · 2 Sept 2026
- Manchester Airports Group attack: Millions of holidaymakers urged to look out for scams as hackers publish stolen data onlineITPro · 3 Sept 2026