How did the Manchester Airports Group cyberattack take place, and what data was exposed in the 8.7 million customer records? The experts weigh in

As the UK enters one of its busiest periods for travel, some holiday makers will be questioning how hackers managed to get their hands on their personal data.

The Manchester Airports Group (MAG), which owns and oversees Manchester, London Stansted, and East Midlands airports, has revealed that hackers managed to steal data belonging to 8.7 million customers.

Given the sources of the data taken - spanning car park services, lounge and Fast Track bookings and in-airport WIFI sign-ups - it is likely a large database of information was accessed by the hackers.

What data was taken? The data accessed and stolen by the hackers include email addresses, phone numbers, vehicle registrations and postcodes of up to 8.7 million customers.

While banking and financial information remained secure during the attack, this level of data exposure places customers at a heightened risk for targeted phishing and scams. (Image credit: Future) Got an opinion for us? Here’s how you can submit your perspective A statement by MAG said, “We immediately contained the risk and have been working with specialist advisors and taking appropriate steps to protect our customers and systems.

We have informed and are working with the relevant authorities.

At no point has passenger safety or aviation security been compromised.” MAG advised customers who have been affected by the breach to remain vigilant against suspicious emails and calls.

Given the data exposed in the attack, these could be highly specific, referring to flights, parking (including customer number plates), and airport services.

MAG issued the following guidance: Remaining vigilant for suspicious emails, text messages or phone calls Avoiding clicking on links or opening attachments from unexpected communications Seeking further support and advice at Data breach guidance for individuals Expert perspectives on MAG data breach Graeme Stewart, Head of Public Sector, Check Point Software We warned after the attacks on the automotive sector last year that aviation needed to move onto a war footing.

This feels like the moment that warning becomes very real.

Cyber criminals have already shown us what sustained pressure on a major industry can look like.

They find the weak points, work through suppliers and connected systems, steal data and keep coming.

There was every reason to believe aviation would become an attractive target, and an incident affecting almost nine million airport customers should concentrate minds across the sector.

The absence of cancelled flights or queues at terminals does not make this a small cyber attack.