Major Cyberattack on UK Airports Exposes Data of 8.7 Million Customers

Dailyrecord

Major Cyberattack on UK Airports Exposes Data of 8.7 Million Customers

First seen 27 Sep 2026, 04:50 UTC • •66.0

Article Content

1 / 3

Browse articles

ThreatCluster •September 27, 2026 at 18:20 UTC

•8.7 million customer records compromised in a cyberattack on MAG airports.
•Hackers demanded ransom; MAG refused, leading to data publication online.
•Legal action initiated, with potential compensation claims reaching £100 million.

Manchester Airports Group (MAG) suffered a cyberattack affecting three UK airports, compromising data of approximately 8.7 million customers. The breach involved personal information such as email addresses, phone numbers, vehicle registrations, and postcodes from ancillary systems related to airport Wi-Fi and car parking. The attack occurred over the weekend of August 22-23, 2026, and was confirmed by MAG on August 27, 2026. Hackers demanded a ransom, which MAG refused, leading to the publication of the stolen data online. Affected airports include Manchester, London Stansted, and East Midlands. Legal action is being initiated against MAG, with claims potentially reaching £100 million. Customers are advised to be vigilant against phishing attempts following the breach. MAG is collaborating with cybersecurity experts to address the incident.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-08-22

Cyberattack occurs

Hackers breached MAG's systems, accessing customer data related to Wi-Fi and parking services.

2026-08-23

Data accessed

Personal data of approximately 8.7 million customers was accessed during the attack.

2026-08-27

Breach confirmed

MAG publicly confirmed the cyberattack and began notifying affected customers.

2026-09-22

Public disclosure of data breach

MAG disclosed the extent of the breach, including the number of affected customers.

2026-09-27

Legal action initiated

Thompsons Solicitors announced a class action lawsuit against MAG for the data breach.

More articles in this cluster (2)

Threat Graph

4 entities, 3 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Data Breach
T1567 - Exfiltration Over Web Service

Organization (1)

Manchester Airports Group

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Relationships

Data Breach related to Manchester Airports Group
Data Breach related to CWE-200 - Exposure of Sensitive Information
Data Breach related to T1567 - Exfiltration Over Web Service

Following this threat?

Track Manchester Airports Group in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Exploits Target F5 and Check Point Products F5 Networks released emergency hotfixes for a critical zero-day vulnerability, CVE-2026-94127, in its BIG-IP Access Policy Manager on September 22, 2026, after confirming active exploitation. This flaw allows unauthenticated remote code execution (RCE) and has a CVSS score of 9.8. Concurrently, Check Point disclosed…

Critical Zero-Day Vulnerability in F5 BIG-IP APM Exploited for Remote Code Execution F5 Networks has reported a critical vulnerability in its BIG-IP Access Policy Manager (APM), tracked as CVE-2026-94127, which is being actively exploited in the wild. The flaw allows unauthenticated attackers to execute remote code on systems configured with both an APM access policy and an OAuth profile. This…