Manchester Airports Group 2026 Data Breach

The incident involved car parking, lounge and Fast Track bookings alongside airport Wi-Fi registrations. The date when unauthorised access first began has not been made public.

The reported scope is 8,849,657 accounts. Affected categories include email addresses, names, phone numbers, vehicle registration plates, postcodes and location information, IP addresses, and browser and device details. Purchase and reservation records contain further information such as the service or car park selected, booking references, dates and times, amounts paid and customer identifiers. The fields vary between records.

FulcrumSec's detailed account describes customer profiles, email send/open/click events, subscription choices and account interactions, SMS content populated with booking details, and campaign, list and template configurations from the marketing platform. The group also reports obtaining future travel details and says some of that material was excluded from the published files. Its account does not establish that all of those travel details are publicly available.

Samples examined by BleepingComputer contained personal data consistent with MAG's disclosure and detailed booking information. The reporting did not independently verify the group's claimed access method, total data volume or number of future bookings. MAG said the affected system did not hold customers' bank or payment details, operations continued without disruption, and passenger safety and aviation security were not compromised.

Real booking, vehicle and contact information can make targeted scams more convincing. Check reservations by opening the official website or app directly, and verify unexpected requests through known contact channels. Do not provide card details, banking information, passwords or verification codes in response to an unexpected message.