Manchester Airports Group data breach: what leaked and what to do
Manchester Airports Group (magairports.com) had a data breach on 2026-08-27 affecting 8,849,657 accounts.
!Personal data leaked
Added to the catalogue 2 Sept 2026.
What leaked
- Browser user agent details
- Email addresses
- Geographic locations
- IP addresses
- Names
- Phone numbers
- Purchases
- Vehicle registration plates
What happened
In August 2026, Manchester Airports Group (MAG) disclosed a data breach impacting their services. The incident was later claimed by the FulcrumSec hacking group, who subsequently published email addresses and phone numbers relating to 8.8M customers of Manchester, Stansted and East Midlands airports. The data contained personal information relating to airport services, including vehicle registrations and parking history, Fast Track purchases and lounge bookings. In their disclosure notice, MAG advised that "at no point has passenger safety or aviation security been compromised".
Description from Have I Been Pwned, in its words.
What to do
- Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
- If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.
- Turn on two-factor sign-in on that service and on your email.
Common questions
What leaked in the Manchester Airports Group breach?
Browser user agent details, Email addresses, Geographic locations, IP addresses, Names, Phone numbers, Purchases, Vehicle registration plates
When did the Manchester Airports Group breach happen?
The breach date is 2026-08-27; it was added to the public catalogue on 2026-09-02.
What should I do if my staff used this service?
Warn staff about emails, texts and calls quoting the leaked details, and watch for sign-in attempts on the services they use.
Was a staff address in this breach?
Check one address free, no storage. Breach Watch checks every staff address after each new breach.