2026 Manchester Airports Group — ~8.7M customers; parking/lounge/WiFi emails + vehicle regs
Data compromised
Emails, phone numbers, vehicle registrations, postcodes; no bank/payment details per MAG
Technical writeup
Verified airport-group notice — August 27, 2026. Manchester Airports Group (MAG), operator of Manchester, London Stansted, and East Midlands airports, confirmed an unauthorized third party obtained customer data related to car park, lounge, Fast Track bookings, and in-airport WiFi sign-ups. The Guardian and MAG cited approximately 8.7 million affected customers. Fields include email addresses, phone numbers, vehicle registrations, and postcodes; MAG states neither MAG nor the accessed system held bank or payment details. Passenger safety, aviation security, and flight operations were unaffected; Manage My Booking was temporarily suspended as a precaution. recordsAffected 8700000 from MAG/Guardian; companyConfirmed true.
Root cause
Unauthorized third party obtained MAG customer data from car park, lounge, Fast Track, and in-airport WiFi systems (Aug 2026)