Dr Ismini Vasileiou – founder of the East Midlands Cyber Security Cluster (EMCSC) – has spoken to BBC East Midlands following a cyber security incident affecting Manchester Airports Group.

The group, which operates Manchester Airport, East Midlands Airport and London Stansted Airport, confirmed this week that unauthorised access was gained to customer data. 

It said around 8.7 million customers may have been affected, with information including names, email addresses, telephone numbers, vehicle registration details and postcodes among the data accessed.

Manchester Airports Group said that airport operations have not been affected and that aviation safety and security systems remain secure. The incident is understood to relate to customer data connected with services such as parking, lounges, Fast Track and Wi-Fi.

Speaking to BBC East Midlands, Dr Vasileiou highlighted the importance of organisations preparing for cyber incidents as part of their wider business resilience planning.

“It was a data breach affecting customer information, rather than an attack on the operational systems that keep aircraft and passengers safe,” she said. “However the fact East Midlands Airport is an important part of our regional  infrastructure makes it a significant cyber incident.

“Stolen personal information can be used to make phishing emails, texts and fraudulent calls much more convincing.

“So if you’ve used airport parking, FastTrack, lounges or airport Wi-Fi, be particularly cautious about unexpected messages claiming to be from the airport and asking you to click a link, provide information or make a payment.”

Dr Vasileiou also said that ⁠an email address, phone number, postcode or vehicle registration can become much more valuable when it’s combined with other information. She added that cyber criminals increasingly build a picture of an individual and then use that information to establish trust.

“We must remain vigilant,” Dr Vasileiou told the BBC. “Don’t respond to unexpected messages asking you to verify your details because of this breach.

“Don’t use links contained in those messages – go directly to the airport’s official website – and if a message creates urgency – telling you that you need to act immediately – that’s exactly when you should stop and check.”

For businesses across the East Midlands, practical and proportionate cyber resilience can include understanding the information they hold, limiting access to those who need it, keeping systems updated, training staff to recognise suspicious activity and knowing who to contact if an incident occurs.

EMCSC brings together regional businesses, education providers, cyber specialists and public-sector partners to support cyber resilience through knowledge exchange, practical learning and trusted signposting. 

Its work helps turn UK cyber strategy into regional action, supporting organisations to build capability and manage cyber risk in a changing digital landscape.