A cyber security breach affecting data at three UK airports means about 8.7 million customers' personal details are at risk.