Manchester Airports Group data breach exposes 8.8 million people

Manchester Airports Group (MAG) has confirmed a significant data breach involving a third-party database, exposing the personal information of approximately 8.8 million people. The breach affects customers of Manchester, London Stansted, and East Midlands airports.

According to the extortion group FulcrumSec, which claimed responsibility for the attack, the leaked data includes email addresses, phone numbers, vehicle registration details, and postcodes. The information is linked to parking, lounge, Fast Track bookings, and airport Wi-Fi sign-ups. While payment card data was not accessed, the group released roughly 550 gigabytes of data after MAG reportedly refused a ransom demand.

FulcrumSec highlighted a specific security risk involving nearly 200,000 passengers whose upcoming travel schedules were exposed. The group noted that combining travel dates with vehicle information could facilitate physical crimes such as burglaries. MAG stated that airport operations, passenger safety, and aviation security were not affected by the incident and that they have engaged specialist advisers and notified relevant authorities.