Manchester Airports Group identified email addresses, phone numbers, vehicle registration numbers and postcodes as the exposed booking and contact fields, varying by service used. Fast Track bookings were one of the affected booking types, alongside car park and lounge bookings.
Fast Track is a paid airport service that lets passengers use a faster lane through security. Help Net Security reports the four-field list in its breach details report. The incident covered about 8.7 million people across Manchester, London Stansted and East Midlands airports.
Table of Contents
- Which airport systems were involved?
- What booking details did MAG name for Fast Track users?
- Did most people lose only an email address?
- Was payment or flight safety affected?
- What should travellers do now?
Which airport systems were involved?
The affected systems were car park, lounge and Fast Track bookings plus in-airport Wi-Fi sign-ups. Core flight and passport systems were not part of the affected group. That
Data Published: Why the Distinction Matters”>distinction matters
What booking details did MAG name for Fast Track users?
MAG named emails, phone numbers, vehicle registration numbers and postcodes. The exact fields varied by the service each person used.
A Fast Track buyer could therefore have contact details exposed rather than travel documents. A driver who also booked parking could have a phone number, postcode and plate linked to the same incident.
Did most people lose only an email address?
Yes. BetaNews reports that the overwhelming majority had only an email address from Wi-Fi sign-up exposed in its airport breach summary. Phone, postcode and vehicle registration were limited to a smaller parking, lounge and Fast Track booking subset.
Readers should therefore match their own airport activity to the right group. Wi-Fi-only users face mainly spam and phishing to that email address. Booking users should treat phone, postcode and plate as potentially exposed as well.
Was payment or flight safety affected?
MAG said neither it nor the accessed system held customers' bank or payment details. No payment-card or banking data was therefore compromised in the access it described.
Passenger safety and aviation security were never compromised. Airport operations continued, and existing parking, lounge and Fast Track bookings remain valid.
What should travellers do now?
Treat later messages that quote your trip, plate or postcode with care. ComputerWeekly describes independent parsing of the later-leaked dataset that found about 8.8 million emails plus names, phones, IP addresses, geolocation, purchase histories and vehicle plates in its leaked dataset analysis.
That parsed set is broader than MAG's four-field list. Security experts warn the leaked name, phone, plate and postcode details can support convincing phishing, spam calls and targeted extortion of travellers.
- Do not click links or attachments in messages about parking refunds, lounge changes or Fast Track upgrades.
- Call the airport or booking provider through its official site to check any booking message.
- Block and report spam calls that repeat your plate, postcode or travel date.
- Change the password on the exposed email account and turn on two-step sign-in.
You Might Also Like
- Used Airport Wi-Fi Without Booking Parking? Why the MAG Data Breach Could Still Matter
- Stansted and East Midlands Data Breach Notices: How They Connect to Manchester Airports Group
- Manchester Airport Data Breach: Are Existing Parking and Lounge Bookings Still Valid?