Manchester Airports Group says hackers stole travelers' data

[XploitLK-Bot]

The Manchester Airports Group (MAG) has confirmed that unauthorized actors accessed its systems and exfiltrated customer data. The breach specifically affected personal details provided during Wi-Fi sign-ups at three major UK airports: Manchester, London Stansted, and East Midlands.

According to the disclosure, the stolen records likely include names, email addresses, and phone numbers submitted when travelers connected to the airport’s free wireless service. MAG has stated that the attackers did not access any financial data, such as payment card numbers or bank account details, as the Wi-Fi registration process does not collect such information.

The group has notified the Information Commissioner’s Office (ICO) and the relevant UK security authorities, and is in the process of contacting affected individuals directly. While the exact scale of the breach has not been officially confirmed, MAG advises those who used the Wi-Fi service to remain vigilant against unsolicited communications or phishing attempts.

• Affected airports: Manchester, Stansted, East Midlands
• Compromised data: names, email addresses, phone numbers (from Wi-Fi registration)
• Not affected: payment card or financial data
• Actions taken: ICO notification, user notification, ongoing investigation

Source: BleepingComputer

Has your organization dealt with a similar breach involving guest Wi-Fi or public network data, and what steps did you take to secure that attack surface afterward?