Threat Intelligence & APT The Record 1 month ago

Cyberattack on Manchester Airports Group exposes data of 8.7 million customers

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"Image: Dan Stephens via Unsplash Cyberattack on Manchester Airports Group exposes data of 8.7 million customers Manchester Airports Group (MAG) — a public-private partnership which operates three of England’s busiest airports — said Thursday it was hit by a cyberattack affecting data belonging to about 8.7 million customers. According to the company’s announcement , an unauthorized third party..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
airplane
Image: Dan Stephens via Unsplash

Cyberattack on Manchester Airports Group exposes data of 8.7 million customers

Manchester Airports Group (MAG) — a public-private partnership which operates three of England’s busiest airports — said Thursday it was hit by a cyberattack affecting data belonging to about 8.7 million customers.

According to the company’s announcement, an unauthorized third party recently accessed customer data associated with car park, lounge and Fast Track bookings, as well as in-airport Wi-Fi sign-ups at the Manchester, London Stansted and East Midlands airports.

MAG did not disclose how the attackers gained access to the relevant system, nor did it set out what the attackers did while inside beyond accessing customer data. The three airports handled more than 65 million passengers last year, although not all of these would have interacted with the affected services.

The compromised information includes email addresses, phone numbers, vehicle registrations and postcodes. The company said neither it nor the affected system stores customers’ bank or payment card details and that no financial data was exposed.

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →