Cyberattack at three UK airports exposes data about 8.7m customers

The personal data of 8.7 million customers was compromised after a cyberattack on Manchester, London Stansted, and East Midlands airports. 

Manchester Airports Group (MAG), which served 66 million passengers last year, confirmed that the stolen records include customer email addresses, telephone numbers, vehicle registrations, and postcodes collected via WiFi registrations and car park bookings. The company said no bank or payment details were accessed, that aviation security and passenger safety were never compromised, and that the risk was contained immediately upon discovery.

A spokesperson for the company said: "We have informed and are working with the relevant authorities. At no point has passenger safety or aviation security been compromised... Airport operations remain unaffected and customer parking services continue to operate normally." The National Cyber Security Centre (NCSC) confirmed it is collaborating with MAG in response to the cyber incident.

Training announcement: Freevacy provides comprehensive training for new and existing practitioners on the changes introduced by the DUA Act to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations). Our courses are always up to date and provide a forum for learning and discussing how to ensure your data protection processes remain compliant. Find out more.