Approximately 8.7 Million Airport Customers Exposed in Recent Data Breach

What Happened in the Manchester Airports Group Cyberattack?

MAG confirmed that an unauthorised third party had gained access to systems used for car park, lounge, and Fast Track bookings, along with records from airport Wi-Fi registrations. The extortion group FulcrumSec has allegedly claimed responsibility for the data breach and plans to leak 80-550GB of data it stole; however, MAG is yet to disclose this. 

Among the data exposed were customers' email addresses, phone numbers, postcodes and vehicle registration numbers, though, notably, no bank or payment details were held on the affected system. MAG has yet to reveal how the attacker first got in, but as International Airport Review points out, the breach underscores just how much personal data now exists across the growing web of digital services supporting major airports.

In response, MAG said it had contained the immediate risk, brought in specialist advisers and notified the relevant authorities. Flights, terminal operations, parking and existing bookings continued as normal, with passenger safety and aviation security unaffected throughout. The group also temporarily suspended its online ‘Manage My Booking’ service and reached out directly to customers believed to be affected, urging them to stay alert to suspicious messages and calls that could exploit the stolen contact details.

Why Are Airports Such Attractive Targets?

Airports combine huge customer datasets with complex technology, from booking platforms and Wi-Fi networks to baggage services and check-in tools, as well as third-party suppliers and contractors all exchanging information simultaneously. Each connection expands the potential attack surface, not just in airports but in any organisation. The aviation sector also faces two distinct threats: stolen data and disrupted operations. 

The UK aviation threat picture already includes major breaches; a few other recent examples include: 

• British Airways’ 2018 incident affected hundreds of thousands of customers and led to a £20 million Information Commissioner’s Office fine. 
• EasyJet disclosed in 2020 that around nine million customers had personal information exposed.
• A September 2025 attack on Collins Aerospace’s MUSE passenger-processing platform disrupted check-in and boarding at several European airports, including Heathrow.

These cases show why aviation security cannot stop at the organisation’s own systems - suppliers, contractors and shared technology platforms need the same scrutiny.

Cybersecurity Skills Protect Services People Rely On

These incidents reveal what cybersecurity work looks like in practice and why it’s so important, in some cases, on the level of being a national service. 

Teams need people who can monitor threats, manage access, assess suppliers, investigate incidents, explain risk, and support data-protection obligations; it’s not one job or one technical speciality.

A lot of professionals working in other industries will have a large number of transferable skills that would serve them in cybersecurity work. This can include experience within sectors such as operations, compliance, customer service, project delivery and problem-solving, which all transfer into security environments. 

Technical foundations can be learned through structured, industry-recognised training, adding to this previous relevant career experience.

Build Practical Cybersecurity Skills

A career in cybersecurity puts you at the forefront of protecting businesses and the communities they serve from ever-evolving cyber threats. Demand for cybersecurity experts continues to grow, bringing with it strong career prospects and the chance to make a genuine difference.

The MAG cyberattack is a clear reminder of just how important cybersecurity has become - it underlines the need for businesses to adopt robust security measures, and for individuals to seek out the education and training that can help prevent future incidents.

At Learning People, we're committed to delivering high-quality, industry-relevant training that prepares our students for the realities of a fast-changing cybersecurity landscape. Our courses are designed to give learners practical, hands-on experience alongside the insights needed to become confident, effective defenders against cybercrime.

Book a free career consultation to start your cybersecurity career or learn more about our courses.