Manchester Airport Group (MAG) Data Breach
check your eligibility

Person impacted by data breach

On 27 August 2026, Manchester Airports Group (MAG) confirmed it was the subject of a cybersecurity incident The data obtained relates to car park, lounge and Fast Track bookings and in-airport WIFI sign-ups at Manchester, Stansted, and East Midlands airports. Reports indicate that around 8.7 million customers were affected.

Pocket Claim has partnered with KP Law, a law firm that specialises in data breach claims. KP Law is currently exploring a group action data breach claim on behalf of those affected. If Manchester Airports Group notified you about the data breach, you may be able to register your interest in the potential claim and receive updates directly from KP Law if the claim moves forward.

*No-win, no-fee is a term used to describe an agreement between a lawyer and the client. It states that the client cannot be charged if their claim is unsuccessful, provided the terms of the agreement are adhered to by the parties.

In this matter, if it is successful, you will pay 25% of the amount that is recovered plus the cost of any After the Event Insurance. Termination fees may apply if you fail to co-operate with your lawyer or withdraw from the claim.
Reportedly, around 8.7 million customers have been impacted.
Free eligibility check
Encrypted and HTTPS secure
No upfront costs to claim
Takes less than 5 minutes

Find out if you can register your interest

Answer a few short questions to check if you are eligible to register your interest in a potential group action data breach claim against Manchester Airports Group. You may have a right to seek compensation.

THE FACTS SO FAR

What do we know about the Manchester Airport Group data breach?

On 27 August 2026, Manchester Airports Group (MAG) confirmed that an unauthorised third party had obtained customer data during a cyber-security incident. Reports indicate that MAG became aware of the hack on 25 August 2026. The incident was not limited to Manchester Airport: it involved customer information connected withManchester, London Stansted and East Midlands airports

MAG says the affected information relates to: airport car-parking bookings; lounge bookings; Fast Track bookings; and registrations for airport Wi-Fi.

The information accessed includes customers’ email addresses, telephone numbers, vehicle registration numbers and postcodes. This does not necessarily mean that every affected customer had all these categories of information accessed. MAG says neither it nor the affected system holds customers’ bank or payment details.

Approximately 8.7 million customers across the three airports were reportedly affected. MAG reportedly told the BBC that most of the affected information consisted of email addresses collected when passengers registered for airport Wi-Fi.

If you Manchester Airport Group notified you about the data breach, register your interest for a potential group action data breach claim currently being explored by our partnered specialist data breach law firm, KP Law. You could have a right to seek compensation.

FREQUENTLYASKED QUESTIONS

Who are Manchester Airport Group?
+
Manchester Airport Group (MAG) owns and operates Manchester Airport, London Stansted Airport and East Midlands Airport, alongside digital travel services business, CAVU. They are the largest airport group in the UK and handle millions of customers every year.
What happened in the MAG data breach?
+

Manchester Airport Group (MAG) stated that an unauthorised third party obtained customer information connected with airport car-parking, lounge and Fast Track bookings and registrations for airport Wi-Fi.

Approximately 8.7 million customers across Manchester, London Stansted and East Midlands airports were reportedly affected. The incident reportedly occurred during the weekend before MAG became aware of it on Tuesday, 25 August 2026. On Thursday, 27 August 2026, MAG published a statement online regarding the data security incident.

What has MAG said about the data breach?
+

MAG says it took immediate action to contain the incident, including restricting access to the affected systems, engaging specialist cyber-security advisers and notifying the relevant authorities.

MAG also says:

  • Passenger safety and aviation security were not compromised;
  • Operational airport systems were not involved;
  • Airport operations and customer parking services remain unaffected; and
  • Neither MAG nor the affected system holds customers’ bank or payment details.

The group has apologised for the inconvenience and concern caused.

Has my information been accessed in the breach?
+

MAG has notified affected customers directly. If you have received a notification from MAG stating that your information was accessed, this indicates that MAG has identified some information associated with you within the affected data.

However, receiving a notification does not necessarily mean that every category of information listed by MAG was accessed. The notification may not identify the precise information involved in your individual case.

If you have not received a notification, that does not conclusively establish that your information was unaffected. You should check your junk or spam folder and contact MAG directly if you remain concerned.

What personal information was accessed?
+

MAG says the affected information includes customers’:

  • Email addresses;
  • Telephone numbers;
  • Vehicle registration numbers; and
  • Postcodes.

This does not mean that every affected customer had all four categories of information accessed.

Most of the affected information was reportedly limited to email addresses collected when passengers registered for airport Wi-Fi. More detailed information, reportedly including vehicle registrations, was associated with car-parking, lounge and Fast Track bookings.

Can I make a compensation claim?
+
If you receive notification that you are affected by the MAG data breach, register to receive updates on this claim. Our partner law firm, KP Law will let you know what’s happening, and if and when you can make a data breach compensation claim.
What is a group action?
+
A group action claim is where a group of people – sometimes even thousands of people – have been affected by the same issue. Group action cases are also known as class actions, multi-claimant, or multi-party actions.
How much will it cost me to make a claim?
+

There are no upfront costs to join the claim if it moves forward. However, if KP Law pursue a claim on your behalf and that claim is successful, you may have to pay a 'success fee'. This fee is taken from the compensation awarded to you. At KP Law, their success fee is competitive, and they’ll make sure you are fully informed about any potential costs before you enter into an agreement. If you lose, you won’t have to pay a penny.

In this matter, if it is successful, you will pay 25% of the amount that is recovered plus the cost of any After the Event Insurance. Termination fees may apply if you fail to co-operate with your lawyer or withdraw from the claim.