Cyberattack on UK airport operator exposes data of 8.7 million customers

In a statement on its website, MAG said an unauthorised third party obtained a quantity of customer data relating to car park, lounge and Fast Track bookings, and in-airport Wi-Fi sign-ups at the three airports. The stolen information includes email addresses, phone numbers, vehicle registrations, and postcodes, according to a company spokesperson who spoke to The Register. The spokesperson said the attack likely affected around 8.7 million people. Payment details and bank account numbers were not compromised, as MAG does not store such data.

MAG said the incident has not caused any operational disruption, and airport operations and customer parking services continue to function normally. The company has temporarily suspended its “Manage My Booking” online service, advising customers to manage bookings by phone. It is urging customers to remain vigilant against unexpected emails and other communications.

An investigation is underway with the help of specialist advisers, and relevant authorities have been notified. So far, no threat actor has claimed responsibility, and the stolen data has not surfaced on the dark web. It is also unknown whether MAG received a ransom demand.