Manchester Airports Group had personal data for about 8.7 million people published online after a breach that affected its airports.
The exposed records included email addresses, phone numbers and vehicle registrations, and were tied to car-park, lounge and in‑airport Wi‑Fi sign-ups, a corpus analysed by HaveIBeenPwned.
"The data includes both historical locations and planned future travel," cyber-security expert Kevin Beaumont told the BBC, noting that those affected should be alert to scams and stalking risks.
Data offered for free
The attackers said they were releasing "half a terabyte" of data, offered the set for free on a site hosted on the clear internet, and boasted about exploiting weaknesses around companies' digital keys to gain access.
The group operator said in a statement that it has contacted all those affected, reached out to customers with upcoming bookings and that card details were not stored in the compromised system, and added it is working with the authorities and specialist advisors.
