8.7 Million Airport Customers Just Became Phishing Targets — and 'Only an Email Address' Is Doing a Lot of Work
If you've flown through Manchester, Stansted, or East Midlands airports — or booked parking, lounges, or fast-track security with them — assume your email address is now in criminal hands. Manchester Airports Group, the UK's largest airport operator, confirmed a cyberattack exposed data belonging to roughly 8.7 million customers. The company says the 'vast majority' of cases involved only an email address, but that phrase deserves more scrutiny than comfort.
Bottom Line
This isn't a catastrophic breach on its face — mostly email addresses, no confirmed operational disruption. But it's a textbook case of how 'low-sensitivity' data becomes high-value ammunition when paired with context, and another data point in a sustained pattern of British institutions failing to protect customer information. The unanswered questions — who did it, what the non-majority of victims lost, and how far back the data goes — matter more than the reassuring framing.