According to the disclosure, the stolen records likely include names, email addresses, and phone numbers submitted when travelers connected to the airport’s free wireless service. MAG has stated that the attackers did not access any financial data, such as payment card numbers or bank account details, as the Wi-Fi registration process does not collect such information.

The group has notified the Information Commissioner’s Office (ICO) and the relevant UK security authorities, and is in the process of contacting affected individuals directly. While the exact scale of the breach has not been officially confirmed, MAG advises those who used the Wi-Fi service to remain vigilant against unsolicited communications or phishing attempts.

• Affected airports: Manchester, Stansted, East Midlands
• Compromised data: names, email addresses, phone numbers (from Wi-Fi registration)
• Not affected: payment card or financial data
• Actions taken: ICO notification, user notification, ongoing investigation

Source: BleepingComputer

Has your organization dealt with a similar breach involving guest Wi-Fi or public network data, and what steps did you take to secure that attack surface afterward?