Join the Claim isn’t a law firm. We connect you with regulated UK firms that run group action claims. If one of our partner firms takes this case forward, we’ll share more details, including how to check your eligibility.
Join the Claim Limited is a claims management company. This claim is not regulated by the Financial Conduct Authority. Join the Claim Limited is authorised and regulated by the FCA (FRN: 1053404) for regulated claims management activities only.
Register your interest
Overview
Millions of customers have been affected by a cyber security incident involving Manchester Airports Group (MAG), which operates Manchester Airport, London Stansted Airport and East Midlands Airport.
MAG became aware of the incident on 25 August 2026 after an unauthorised third party gained access to customer information connected with airport car parking, lounge and Fast Track bookings, as well as on-airport Wi-Fi sign-ups.
The information accessed may include email addresses, phone numbers, vehicle registrations and postcodes. Some affected customers also had upcoming bookings already in place at the time of the breach.
Cyber extortion group FulcrumSec has since claimed responsibility for the attack and said it stole around 86 GB of data, including more detailed customer, booking and travel information.
In September, stolen information linked to around 8.7 million people was published online.
The breach has since been added to Have I Been Pwned, which says the published data includes 8.8 million affected email addresses, as well as names, phone numbers, purchase information, vehicle registrations and other personal data.
MAG says neither it nor the affected system holds customers’ bank or payment details. It also says it has contacted affected customers, including those with upcoming bookings.
Register your interest today and we’ll keep you informed if one of our regulated UK partner law firms is able to investigate potential legal action relating to the incident.
Manchester Airports Group – At a glance
Join the Claim is bringing people together — uniting those who want answers, accountability and stronger data protections from the organisations they trust.
Staying informed is the first step towards change. By registering alongside others affected, you’re showing that people expect better. And that when something goes wrong, they want to see it put right.
How Join the Claim works
Take a moment to answer a few simple questions so we can understand your connection and keep you updated.
Share your details so we can keep you informed if any updates become available.
If a partner law firm takes this claim forward, we’ll let you know the next steps and how to join.
Latest updates on the Manchester Airports Group data breach
2 September 2026
The Manchester Airports Group (MAG) data breach takes a serious turn after hackers publish stolen information linked to millions of people. According to media reports, the hackers had tried to extort MAG for an undisclosed sum but did not receive a ransom payment.
Have I Been Pwned adds the breach to its database. The data breach monitoring service says the published data includes 8.8 million affected email addresses, as well as names, phone numbers, purchases, vehicle registrations, IP addresses and other personal information.
30 August 2026
Hacking group FulcrumSec claimed responsibility for the attack affecting Manchester, London Stansted and East Midlands airports. According to media reports, samples of the allegedly stolen information appeared to contain more detailed customer, booking and travel data than MAG initially disclosed.
27 August 2026
Manchester Airports Group confirms a cyber security incident involving customer information.
25 August 2026
Manchester Airports Group became aware of the incident after an unauthorised third party gained access to customer information connected with airport car parking, lounge and Fast Track bookings, as well as on-airport Wi-Fi sign-ups.
We’ll provide more updates on the data breach as they occur.
Are you affected by the Manchester Airports Group data breach?
Register to stay updated and we’ll let you know if a partner law firm takes this claim forward.
Frequently asked questions about the Manchester Airports Group data breach
Manchester Airports Group says an unauthorised third party gained access to customer information.
The affected information relates to airport parking, lounge and Fast Track bookings and on-airport Wi-Fi sign-ups at Manchester, London Stansted and East Midlands airports.
Cyber extortion group FulcrumSec later claimed responsibility for the attack, and stolen information linked to millions of customers has since been published online.
Have I Been Pwned has added the breach to its database, covering 8.8 million affected email addresses.
The incident involves customer information associated with Manchester Airport, London Stansted Airport and East Midlands Airport.
All three are operated by Manchester Airports Group.
MAG says the information accessed can include:
MAG initially said that, for the vast majority of affected customers, only their email address had been accessed.
However, the published data appears to contain more detailed information. Have I Been Pwned lists compromised information including names, phone numbers, IP addresses, geographic locations, purchases, vehicle registrations and browsing/device information.
Earlier samples of the allegedly stolen data also reportedly contained detailed booking information, including parking dates and times, booking references, prices and historical spending.
MAG says neither it nor the affected system holds customers’ bank or payment details.
Have I Been Pwned has added the Manchester Airports Group breach to its database, covering 8.7 million affected email addresses linked to Manchester, Stansted and East Midlands airports.
MAG says it has contacted affected customers directly.
If you have received a notification from MAG, keep a copy of it along with any further correspondence about the incident.
You can also check whether your email address appears in the published breach using Have I Been Pwned.
MAG advises affected customers to remain vigilant for suspicious emails, text messages and phone calls and to avoid clicking links or opening attachments in unexpected communications.
Be particularly cautious if a message appears to know genuine details about your airport bookings, car or travel plans.
MAG says it will never contact you unexpectedly to request payment-card details, banking information or passwords.
Potentially, but it is too early to know.
Being affected by a data breach does not automatically mean someone is entitled to compensation.
People may be able to seek compensation where an organisation has broken data protection law and they have suffered damage as a result. This can include financial loss or, in some circumstances, distress.
At this stage, there has been no finding that Manchester Airports Group broke data protection law and Join the Claim is not yet working with a partner law firm.
If a regulated UK partner law firm decides to investigate potential legal action, we’ll let registered users know.
We are not a law firm. Our role is to keep people informed about potential group actions if one of our regulated UK partner law firms is able to take this claim forward.
By registering, you’ll stay up to date with any developments — from investigations to possible legal action.
No. Registering simply means you’ll receive updates. If a law firm later takes on the case, you’ll be given the option to learn more about the process and any potential costs before deciding whether to take part.
A group action claim allows people affected by the same issue to take action together. This strength in numbers helps stand up to big organisations. Join the Claim helps connect people with law firms so these actions have a real impact.
No. You are free to contact a solicitor directly at any time if you would like legal advice or wish to explore a claim.
When you register your interest with Join the Claim, we’ll keep you updated if one of our regulated partner law firms decides to take the claim forward. However, other law firms may also investigate or pursue claims independently of Join the Claim.
Registering for updates does not prevent you from speaking to another law firm or joining a claim elsewhere.
Latest Manchester Airports Group data breach news
We connect consumers with their legal dream teams to ensure they get the compensation and support they deserve.
Join the Claim is not a law firm. We connect individuals with top law firms for group or individual claims, and our service is free to use. While we may receive a fee from the law firms we introduce you to, this will not affect your costs or compensation. We are not responsible for the advice or services provided by these firms. Please note, nothing on this website is legal advice, and while we check claim eligibility, we cannot guarantee a law firm will accept a case.
Join the Claim is a trading name of Join the Claim Limited, authorised and regulated by the Financial Conduct Authority (FRN: 1053404). Registered in England and Wales, Company No: 16245278. Registered office: 32 Eyre Street, Sheffield, S1 4QZ.
© Join the Claim All Rights Reserved |
