Millions of customers' data accessed after cyber attack on Airports Group

Millions of customers' personal data has been accessed after a cyber attack on Manchester Airports Group.

The group sent out an email to around 8.7 million affected people warning that an "unauthorised third party" has obtained personal data including customers’ email addresses, phone numbers, vehicle registrations and postcodes.

The data relates to car park, lounge and Fast Track bookings and in-airport WiFi sign-ups at Manchester, Stansted, and East Midlands airports. Airport operations have not been affected.

The hackers demanded a ransom fee which was not paid, the company said. The ransom amount was not disclosed.

The group says the risk was "immediately contained" and it is working with specialist advisors to protect its customers and systems.

Manchester Airports Group has told ITV News that the "vast majority" of breaches were email addresses from WiFi sign-ups.

The company, which operates Manchester Airport, London Stansted and East Midlands Airport, said “at no point has passenger safety or aviation security been compromised” during the incident.

A spokesperson said: "Manchester Airports Group has been subject to a cyber security incident by an unauthorised third party.

"A quantity of customer data has been obtained that relates to car park, lounge and Fast Track bookings and in-airport WIFI sign-ups at Manchester, Stansted, and East Midlands airports.

"We immediately contained the risk and have been working with specialist advisors and taking appropriate steps to protect our customers and systems.

"We have informed and are working with the relevant authorities. At no point has passenger safety or aviation security been compromised.

"The incident has not resulted in any operational disruption. Airport operations remain unaffected, and customer parking services continue to operate normally.

"Neither MAG nor the system accessed hold customers’ bank or payment details. The data that has been accessed includes customers’ email addresses, phone numbers, vehicle registrations and postcodes.

"We would like to reassure customers that Manchester Airports Group takes the security of customer information extremely seriously and we apologise for any inconvenience or concern caused."

David Taylor, Managing Director of cybersecurity company Aruga Cyber has given his advice on what to do if you receive an email saying that your personal data has been accessed.

He said: "Customers should not be worried, but they should be alert. If you do not have multi-factor authentication configured on your emails, then I would definitely do that.

"It doesn't look like any payment details have been taken or passwords, but I would just be very alert to precaution.

"I would also let friends and family know just in case they're not aware of the breach, just in case they fall victim to any of the scam texts or phishing emails. "

North West Leicestershire MP, Amanda Hack she was aware of the cyber incident and is in with the airport.

She said: "Having spoken directly with East Midlands Airport early this afternoon, I have received an update on the situation and the response that is now underway.

"The airport has assured me that affected customers have been informed and provided with details of who they should for further information.

"Specialist cyber security support has already been engaged by MAG, and a thorough review is now underway to establish what happened and ensure appropriate measures are in place.

"I will continue to monitor the situation and remain in with the airport as the review progresses. Customers who have concerns should use the details provided directly by the airport for the latest information and support.”

More than 32 million passengers flew into or out of Manchester Airport last year, while more than 30 million travelled through Stansted, in Essex, and four million through East Midlands in Leicestershire.

Want more on the issues affecting the North? Our podcast, From the North answers the questions that matter to our region.