Hackers steal data from 8.7 million airport customers in UK cyberattack

Three major UK airports have been hit by a cyberattack in which hackers accessed the personal data of around 8.7 million customers and demanded a ransom.

Manchester Airports Group (MAG), which operates Manchester, East Midlands and London Stansted airports, said the incident occurred over the weekend and involved the theft of customers’ contact details, vehicle registration numbers and postcodes, Caliber.Az reports, citing the BBC.

According to the group, the attackers demanded payment in exchange for returning the stolen data, but MAG refused to pay. The amount requested has not been disclosed.

MAG made clear that the breach did not affect passenger safety or aviation security and that no bank or payment information was stored on the compromised system.

Most of the data accessed consisted of customer email addresses linked to WiFi registrations at the airports’ terminals.

More sensitive information, including vehicle registration numbers, was obtained from customers who booked airport parking, lounge access and fast-track services.

MAG claimed that it discovered the breach on Tuesday and acted quickly to prevent further unauthorised access. The company also notified customers who may have been affected.

"We immediately contained the risk and have been working with specialist advisors and taking appropriate steps to protect our customers and systems," MAG noted. "We have informed and are working with the relevant authorities."

The airport operator apologised for any concern caused by the incident and stressed that it takes the protection of customer information seriously.

The identity of the hackers is known, according to MAG, which has shared the information with the relevant authorities.

Customers have been advised to remain alert to suspicious emails, text messages and phone calls and not to open attachments from unknown senders.

By Bakhtiyar Abbasov