Cybercrooks jet off with Manchester Airports Group customer data

The company behind three of the UK's busiest airports says a quantity" of data was stolen during a recent cybersecurity incident". Manchester Airports Group (MAG) operates Manchester Airport in the North West of England, Cambridgeshire's Stansted Airport, and East Midlands Airport in Derbyshire. The affected data includes information collected as part of its car parking, lounge, and fast track bookings, as well as information collected as part of MAG's public Wi-Fi services. Email addresses, phone numbers, vehicle registrations, and postcodes are the data types currently known to be compromised. A spokesperson at MAG told The Register that the majority of the 8.7 million customers caught up in the breach only had their email addresses compromised. As is always the case, individuals will be affected in different ways. Not all of the data types will be compromised for all customers. The company, which recently celebrated a record 66 million passengers travelling through its airports in a year, said it immediately contained the risk" and brought in external expertise to advise on next steps. We have informed and are working with the relevant authorities," said MAG in a statement. At no point has passenger safety or aviation security been compromised." It confirmed that none of its airports experienced operational disruption as part of the attack, and that the affected system does not store bank or payment details. However, as a precautionary measure," it temporarily revoked access to its Manage My Booking service. Customers who want to amend or cancel a booking due within 72 hours of the statement going live are being advised to contact customer services. We would like to reassure customers that Manchester Airport Group takes the security of customer information extremely seriously and we apologise for any inconvenience or concern caused." Affected customers have already been contacted, including a few Reg readers who kindly alerted us to the news. While MAG continues to investigate the incident, customers were advised to be extra vigilant to potential phishing attempts, and remain assured that there is no danger of visiting MAG's airports as a result of the cyberattack. One Reg reader griped that in addition to being charged 80 for five days of parking at Stansted, receiving the email informing him that it had also allowed his personal data to be stolen via a cybersecurity breach added insult to injury. The Register asked MAG for additional information, but a spokesperson only responded with the same statement issued online. (R)