01Summary
MAG disclosed on 28 August 2026 that customer data had been taken. Most was email addresses from free terminal Wi-Fi sign-ups. Phone numbers, vehicle registrations and postcodes of customers who booked parking, lounges or fast-track security were also taken. No payment data was accessed and flight operations were unaffected. The group FulcrumSec later claimed the attack and published emails and phone numbers for about 8.8 million customers.
02Victims and impact
Countries affected
- United Kingdom
03Data exposed
Data types
- Email addresses
- Phone numbers
- Vehicle registration numbers
- Postcodes
04Timeline
- 2026-08-28MAG discloses the breach. FulcrumSec later claims it and leaks contact data.
05Disclosure and media
Publishing organisations
- Help Net Security
- Bitdefender
- IT Security Guru
06Sources
References
- [1]Help Net Security: https://www.helpnetsecurity.com/2026/08/28/manchester-airports-group-data-breach/
- [2]Have I Been Pwned: https://haveibeenpwned.com/Breach/ManchesterAirportsGroup









