Hackers steal data from millions of airport customers

News imageEPA Manchester airport group.EPA
About 8.7 million customers across three UK airports had their data accessed

Three major UK airports have been hit by a "cyber security incident" in which criminal hackers accessed the data of almost nine million people and demanded a ransom.

Manchester Airports Group (MAG), which owns Manchester, East Midlands and London Stansted airports, said customers' contact details, vehicle registrations and postcodes were obtained by hackers at the weekend.

MAG told the BBC the hackers demanded a ransom fee for the return of the data, which the group said it refused to pay. The sum of the ransom fee was not disclosed.

MAG said "at no point has passenger safety or aviation security been compromised" and the system hacked did not hold customers' bank or payment details.

The data of about 8.7 million customers was accessed.

The majority of the data accessed was restricted to customer email addresses and related to WiFi sign-ups within the airports' terminals, MAG said.

MAG said in a statement: "We would like to reassure customers that Manchester Airport Group takes the security of customer information extremely seriously and we apologise for any inconvenience or concern caused."

News imageEast Midlands Airport outside
East Midlands Airport was one of those affected, along with Manchester and London Stansted

The firm said it only became aware of the hack on Tuesday and quickly prevented the hackers gaining any more access, and notified affected customers.

"We immediately contained the risk and have been working with specialist advisors and taking appropriate steps to protect our customers and systems," MAG said.

"We have informed and are working with the relevant authorities."

News imagePeople in the departure lounge at Manchester Airport
The hackers managed to steal email addresses after customers accessed WiFi in the airports

The airport group said the e-mail addresses obtained by the hackers came from passengers signing up to the airports' on-site WiFi.

More detailed data, including vehicle registrations, came from people booking car-park spaces, arranging access to lounges, and booking fast-track.

Customers are urged to remain vigilant about suspicious emails, text messages or phone calls and avoid opening attachments from unknown contacts.

The identity of the hackers was known, MAG said, and the relevant authorities had been informed.

Listen to the best of BBC Radio Manchester on Sounds and follow BBC Manchester on Facebook, X, and Instagram. You can also send story ideas via Whatsapp to 0808 100 2230.