Manchester Airports Group data breach (August 2026): what MAG confirmed
In August 2026 Manchester Airports Group said customer data had been stolen in a cyber incident affecting customers of three UK airports.
Short answer
Was Manchester Airports Group hacked?
Yes. MAG said customer data was stolen in a cyber incident, mostly email addresses but also phone numbers, vehicle registrations and postcodes for some customers. It says no payment card or bank details were in the affected system and airport operations were unaffected.
Press reports put the number at about 8.7 million customers; MAG’s statement did not give a precise total.
Timeline at a glance
27 Aug 2026MAG confirms customer data stolen; ~8.7M customers per press reports. (The Record)Confirmed
Last updated October 31, 2026. Every entry is dated and linked to its source; claims by attackers are labelled as claims, never stated as fact.
Manchester Airports Group’s security posture at the time
What Manchester Airports Group publicly said about its security certifications and controls, how big it is, and how its shares moved, each tied to a source. A certificate covers a stated scope at a point in time; it is not a guarantee about every system. Reviewed 31 October 2026. Compare all 2026 breaches.
Security certifications publicly held
No public certification found.
No public certification found on the company’s own security, trust or compliance pages, in filings, or in the certificate registries searched (BSI, CSA STAR). That is a data point, not proof that none exists.
Size
Private; revenue not verified for this page
Listing: Private
Share price around the disclosure
Not listed.
Manchester Airports Group incident timeline, in detail
Confirmed = acknowledged by Manchester Airports Group, a regulator filing or a court. Reported = credible reporting Manchester Airports Group has not fully confirmed. Unverified claim = an attacker or leak-site claim.
27 Aug 2026ConfirmedCustomer data theft
Customer data stolen across three UK airports
What happened. MAG, which runs Manchester, London Stansted and East Midlands airports, said customer data was stolen in a cyber incident, mostly email addresses but also phone numbers, vehicle registrations and postcodes for some customers. It says no payment card or bank details were held in the affected system and airport operations were unaffected.
Impact. Mostly email addresses; no payment data in the affected system, per MAG. People or records affected: About 8.7 million customers, per press reports; MAG’s statement gave no precise total.
We found no SOC 2 or ISO 27001 certification published by Manchester Airports Group. That does not prove it had none; it means none was public.
A direct intrusion
The company describes unauthorized access to its own systems. The useful questions are how long the access lasted, how it was detected, and whether the affected system was inside the scope any certification covered.
What it means for Manchester Airports Group travellers who used MAG airport services such as parking — and what to do
What Manchester Airports Group’s customers, partners and security teams can do now, based only on what has been disclosed.
1.Ask what was in scope
Ask which systems were reached, what data of yours they held and the dates of access.
Yes. MAG said customer data was stolen in a cyber incident, mostly email addresses but also phone numbers, vehicle registrations and postcodes for some customers. It says no payment card or bank details were in the affected system and airport operations were unaffected.
Did Manchester Airports Group have SOC 2 or ISO 27001 certification?+
We found no SOC 2 or ISO 27001 certification published by Manchester Airports Group. That does not prove it had none; it means none was public.
More in the Breach Index
Same sourced, verification-tagged timeline, company by company — compare how peers have fared.
Independent analysis for security-leadership education; not affiliated with or endorsed by Manchester Airports Group. Facts are attributed to the dated sources above, and anything disputed or unconfirmed is labelled as such. See the full Breach Index.
🎉 New here? Use code WELCOME10 for 10% off any plan at checkout