[REVISION HISTORY]

Manchester Airports Group cyberattack and data leak

Updated 5 times since CLSTR started tracking revisions of this situation.

What changed

2026-08-28 06:06 UTC → 2026-09-06 11:12 UTC · added ~~removed~~

Manchester Airports Group (MAG) has confirmed that a major cyberattack impacting Manchester, London Stansted, and East Midlands ~~airports. The breach exposed~~ airports has resulted in the ~~personal information~~ release of personal data belonging to approximately ~~8.7~~ 8.8 million ~~customers, including email addresses, phone numbers, vehicle registration numbers, and postcodes~~ people. The breach involved unauthorized access to a third-party database containing information related to car park, lounge, and Fast Track bookings, as well as Wi-Fi ~~users.~~ registrations. The extortion group FulcrumSec has claimed responsibility for the attack, stating they released roughly 550 gigabytes of data after MAG ~~stated~~ refused a ransom demand. The leaked information includes email addresses, phone numbers, vehicle registration numbers, and postcodes. Cybersecurity experts and the attackers have highlighted specific risks regarding secondary scams and physical crimes; specifically, the exposure of upcoming travel schedules for nearly 200,000 passengers could facilitate burglaries when combined with vehicle information. MAG maintains that no bank or payment details were compromised, as the group does not hold such information. While airport operations continued normally, the ‘Manage My Booking’ service at Stansted was temporarily suspended. The company advised affected customers to remain vigilant against suspicious communications. Recent reports confirm that for the vast majority of affected customers, only email addresses were compromised. MAG has emphasized compromised and that airport operations, passenger ~~safety~~ physical safety, and aviation security remain ~~uncompromised, and the company is contacting affected individuals directly.~~ uncompromised. The group is ~~currently~~ working with specialist advisors and relevant ~~authorities to manage the incident. New details reveal that the attackers demanded a ransom during~~ authorities, including the ~~incident, which MAG refused to pay. The breach involved unauthorized access to data linked to airport Wi-Fi registrations alongside booking details. The~~ UK Information Commissioner’s Office ~~(ICO) has been notified and is currently assessing~~ (ICO), to manage the ~~incident.~~ incident and contact affected individuals.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.