> Cybercrooks jet off with Manchester Airports Group customer data

The company behind three of the UK’s busiest airports says “a quantity” of data was stolen during a recent “cybersecurity incident.” Manchester Airports Group (MAG) operates Manchester Airport in the North West, Cambridgeshire’s Stansted Airport, and East Midlands Airport in Derbyshire. The affected data includes information collected as part of its car parking, lounge, and fast track bookings, as well as information collected as part of MAG's public Wi-Fi services. Email addresses, phone numbers, vehicle registrations, and postcodes are the data types currently known to be compromised. One Reg reader griped that in addition to being charged £80 for five days of parking at Stansted, receiving the email informing him that it had also allowed his personal data to be stolen via a cybersecurity breach added insult to injury. As is always the case, individuals will be affected in different ways. Not all of the data types will be compromised for all customers. MAG did not specify the scale of the breach via its public-facing announcement, although it reportedly told local newspaper Manchester Evening News that most of the 8.7 million individuals affected only had their email addresses exposed. The company, which recently celebrated a record 66 million passengers travelling through its airports in a year, said it “immediately contained the risk” and brought in external expertise to advise on next steps. “We have informed and are working with the relevant authorities,” said MAG in a statement. “At no point has passenger safety or aviation security been compromised.” It confirmed that none of its airports experienced operational disruption as part of the attack, and that the affected system does not store bank or payment details. However, “as a precautionary measure,” it temporarily revoked access to its Manage My Booking service. Customers who want to amend or cancel a booking due within 72 hours of the statement going live are being advised to contact customer services. “We would like to reassure customers that Manchester Airport Group takes the security of customer information extremely seriously and we apologise for any inconvenience or concern caused.” Affected customers have already been contacted, including a few Reg readers who kindly alerted us to the news. While MAG continues to investigate the incident, customers were advised to be extra vigilant to potential phishing attempts, and remain assured that there is no danger of visiting MAG’s airports as a result of the cyberattack. The Register asked MAG for additional information, but a spokesperson only responded with the same statement issued online. ®