Hackers Take Data on Nearly Nine Million Airport Customers — and Are Refused a Ransom

Criminal hackers accessed the personal data of almost nine million people through the systems of Manchester Airports Group, the operator of Manchester, East Midlands and London Stansted, and demanded a ransom the company says it refused to pay.

MAG told the BBC the intrusion happened at the weekend but was only detected on Tuesday, at which point access was cut off. The sum demanded has not been disclosed.

What was taken

The compromised records were, by the company's account, drawn largely from WiFi sign-ups inside the terminals: email addresses, contact details, vehicle registrations and postcodes. MAG says no bank or payment details sat on the affected system, and that neither passenger safety nor aviation security was touched at any point.

That distinction matters less than it sounds. A database of names, home postcodes and vehicle registrations tied to specific travel dates is unusually good raw material for targeted fraud — it tells a caller where someone lives, what they drive, and when they were away from home.

The refusal

Declining to pay is the position law enforcement across the UK and US has urged for years, on the reasoning that payment funds the next attack and buys no guarantee: data already copied stays copied. It is also the harder choice commercially, because refusal usually means the stolen records surface publicly.

The incident lands in a year of sustained pressure on transport and retail operators in Britain, where attackers have increasingly favoured the softer systems around a business — loyalty schemes, guest WiFi, marketing databases — over the hardened core.

Affected customers should expect phishing attempts referencing genuine journey details, which is precisely what makes this class of breach effective.