UK Airport Cyberattack Exposes Data of 8.7 Million Passengers

The breach began with a targeted cyberattack against Manchester Airports Group, which operates Manchester, Stansted, and East Midlands airports. According to Sky News and ComputerWeekly.com, the attackers gained unauthorized access to systems handling customer bookings and services like parking, lounges, and Wi-Fi registration.

The scale of the attack became clear when it was reported that personal data belonging to around 8.7 million passengers had been compromised. The stolen information included email addresses, phone numbers, vehicle registrations, and postcodes, details often used for identity verification and travel arrangements.

News of the breach broke on August 27, 2026. Outlets such as Sky News, the Daily Mail, and PA Media reported that Manchester Airports Group had confirmed the incident and was working to contain the risk. The company stated that airport operations and passenger safety were not affected, but the exposure of personal data was significant.

By August 28, more details emerged about the nature of the breach, with TechRadar and Cyber Security News confirming that data from 8.7 million customers had been accessed. Reports from Adnkronos and TGcom24 indicated that the hackers demanded a ransom, which the company refused to pay, following guidance from authorities. The criminal group behind the attack was later identified as FulcrumSec, which claimed responsibility and said they had obtained 86GB of data, as reported by BleepingComputer and Security Affairs on August 30.

On September 2, 2026, the situation escalated when TechRadar and ComputerWeekly.com reported that after the airport group's refusal to pay the ransom, FulcrumSec posted the stolen data online. This public leak heightened the risk of identity theft and scams targeting affected passengers.

As of early September 2026, the stolen data is circulating online, according to TechRadar and ComputerWeekly.com. Manchester Airports Group and authorities have advised customers to be vigilant for suspicious communications and potential fraud attempts. Airport operations remain unaffected, but the focus has shifted to protecting affected customers and improving cyber defenses.

The breach has sparked a wider debate in the UK about the security of personal data held by major infrastructure operators, especially as travel demand remains high.

Investigations are ongoing, with law enforcement and cybersecurity experts working to trace the attackers and limit the damage from the leaked data. Customers are being urged to monitor their accounts and follow official guidance on protecting their information. There are open questions about whether further leaks or targeted scams will emerge from the stolen data and how Manchester Airports Group will strengthen its systems to prevent future breaches.