Manchester Airport Group confirmed a cyber incident affecting customer data tied to Manchester Airport, London Stansted, and East Midlands Airport, with around 8.7 million customers reportedly impacted. The accessed information primarily included email addresses collected through airport Wi-Fi registrations, along with phone numbers, vehicle registration numbers, and postcodes connected to car park, lounge, and fast-track bookings. MAG said no bank or payment details were exposed, passenger safety and aviation security were not compromised, and flight schedules, terminal operations, and parking services remained unaffected.

The incident still carries meaningful risk because airports sit at the intersection of identity, travel, mobility, payments, parking, passenger services, and critical infrastructure. Even without payment data, exposed contact details, vehicle registrations, postcodes, airport booking history, and Wi-Fi signup data can be used for targeted phishing, travel scams, impersonation, credential theft, and physical-security reconnaissance. For an airport operator handling tens of millions of passengers annually, the key challenge is proving exactly which systems were accessed, what customer journeys were affected, and whether the breach remained isolated from operational technology, aviation systems, identity platforms, and passenger-facing services.

This is why airport operators need a unified platform, like NIKSUN, that becomes the data foundation for AI and security agents. To keep pace with escalating attacks, AI cannot work from disconnected logs, blind spots, and delayed manual reviews; it needs a single, correlated view across Wi-Fi systems, booking platforms, parking services, identity access, vendor connections, endpoints, DNS, NetFlow/IPFIX, packet capture, SNMP-monitored infrastructure, and L2–L7 application traffic. With that unified data layer, agents can immediately trace an incident from initial access to affected applications, customer records, network paths, and containment actions — while confirming whether flight operations, aviation security, and passenger safety systems stayed segmented and clean. That turns breach response from slow uncertainty into fast, evidence-based action, helping airports protect customers, preserve uptime, and maintain trust in critical travel infrastructure. Read more about this story on our LinkedIn page