Hackers have accessed the personal data of 8.7 million people in a cyber attack on Manchester Airports Group, one of the largest airport operators in the United Kingdom. The breach affected customers across all three of the operator's sites: Manchester Airport, London Stansted Airport and East Midlands Airport.
The compromised information relates to online bookings for airport car parks, passenger lounges and fast-track security access, as well as sign-ups for in-airport Wi-Fi networks. The accessed records included customer email addresses, telephone numbers, vehicle registration details and home postcodes.
A spokesperson for Manchester Airports Group said the hack was restricted to email addresses for the "vast majority" of affected customers. The company confirmed that the security incident did not expose any financial information or bank details.
Management was made aware of the security breach on Wednesday, August 26, though the incident is believed to have taken place several days earlier. The airport operator has not disclosed the precise method or vulnerability used by the cyber attackers to gain access to its systems.
Customer advice and operational status
In an email sent directly to customers, Manchester Airports Group urged individuals to be "particularly cautious of unexpected emails, calls or text messages claiming to be from us." The company added: "We will never contact you unexpectedly to ask for payment or banking information. We apologise for any inconvenience or concern this may cause."
Passengers have been told that they do not need to take any specific action following the breach, but should "remain vigilant as normal for unsolicited emails and texts." Unlike cyber attacks last year on Marks and Spencer and the Co-op, which caused significant operational and supply disruptions, flight operations across all three airports remain completely unaffected.
Comparative UK cyber breaches
The scale of the breach makes it one of the largest cyber security incidents in recent British history. In April 2025, a cyber attack on the Co-op resulted in the personal data of all 6.5 million members being compromised, while a 2024 attack on Transport for London exposed the data of an estimated 10 million people.
Manchester Airports Group is the largest British-owned airport operator, serving tens of millions of passengers annually. Its network includes London Stansted Airport in Essex, Manchester Airport serving northern England, and East Midlands Airport in Leicestershire.
