Data Security Incident - 27.08.26

Manchester Airports Group Statement

In August 2026 Manchester Airports Group (MAG) was subject to a cyber security incident by an unauthorised third party. A quantity of customer data was obtained that relates to car park, lounge and Fast Track bookings and in-airport WIFI sign-ups at Manchester, London Stansted, and East Midlands airports.

All affected customers have been informed. We immediately contained the risk and have worked with specialist advisors to take appropriate steps to protect our customers and systems. We are continuing to work with the relevant authorities. At no point has passenger safety or aviation security been compromised.

Neither MAG nor the system accessed hold customers’ bank or payment details. The data that has been accessed includes customers’ email addresses, phone numbers, vehicle registrations and postcodes.

We would like to reassure customers that MAG takes the security of customer information extremely seriously and we apologise for any inconvenience or concern caused.

Frequently Asked Questions

What data has been accessed?

A quantity of customer data was obtained by an unauthorised third party. Neither MAG nor the system accessed hold customers’ bank or payment details. The data that has been accessed includes customers’ email addresses, phone numbers, vehicle registrations and postcodes.

Will my upcoming booking be affected?

No. All upcoming bookings remain valid and are unaffected by this incident. You do not need to take any action regarding your booking.

I would like to amend or cancel my up-coming booking, how do I do this?  

If you wish to resend your booking confirmation, amend, or cancel an up-coming booking, please visit Manage Booking.

Will I be charged if I cancel or change the dates of my booking as a result of this incident?

Should you wish to change your booking dates or cancel your booking as a result of this incident, you can do so at no charge. Any booking cancellations due to the incident will be fully refunded.

What actions has MAG taken to ensure my data is secure?

Upon becoming aware of the incident, we immediately took steps to contain it, including restricting access to the affected system, engaging specialist cyber security experts and notifying the relevant authorities. Our Data Protection team is overseeing the response to ensure that all actions taken are appropriate, thorough and in line with our legal obligations.

What should I do if I believe my data has been compromised?

We have contacted affected customers directly. If you have been notified that you were affected by the incident, your data was made publicly available. Customers should continue to follow standard cyber security good practice, including:

• Remaining vigilant for suspicious emails, text messages or phone calls.

• Avoiding clicking on links or opening attachments from unexpected communications.

• Seeking further support and advice at Data breach guidance for individuals.

MAG will never contact you unexpectedly to request payment card details, banking information, or passwords.

Was there any risk to airport operations at Manchester Airport?

No. This incident did not involve operational airport systems and had no impact on airport operations. Passengers should continue to travel to the airport as normal.