< Back to situations

This situation has concluded

It was preserved as a record on October 5; the timeline below shows how it unfolded, with sources. Get the briefing to follow the top situations still developing: three emails a week, sourced and in order.

Unsubscribe anytime.

[SITUATION] · [QUIET] · [TECHNOLOGY]

5 clusters · 102 sources · 13 days · First seen 2 months ago · Last updated about 2 months ago

Manchester Airports Group cyberattack and data leak

Overview

Manchester Airports Group (MAG) has confirmed that a major cyberattack impacting Manchester, London Stansted, and East Midlands airports has resulted in the release of personal data belonging to approximately 8.8 million people. The breach involved unauthorized access to a third-party database containing information related to car park, lounge, and Fast Track bookings, as well as Wi-Fi registrations.

The extortion group FulcrumSec has claimed responsibility for the attack, stating they released roughly 550 gigabytes of data after MAG refused a ransom demand. The leaked information includes email addresses, phone numbers, vehicle registration numbers, and postcodes. Cybersecurity experts and the attackers have highlighted specific risks regarding secondary scams and physical crimes; specifically, the exposure of upcoming travel schedules for nearly 200,000 passengers could facilitate burglaries when combined with vehicle information.

MAG maintains that no bank or payment details were compromised and that airport operations, passenger physical safety, and aviation security remain uncompromised. The group is working with specialist advisors and relevant authorities, including the UK Information Commissioner’s Office (ICO), to manage the incident and contact affected individuals.

Entities

Manchester Airport · Manchester Airports Group · London Stansted Airport · FulcrumSec · East Midlands Airport

Claims

What the coverage asserts, and how many sources carry each claim.

[● 41 SOURCES] Manchester Airports Group was targeted by a cyberattack by an unauthorized third party. www.saffronwaldenreporter.co.uk · cedarnews.net · ca.news.yahoo.com · londragazete.com · www.countytimes.co.uk · +35 more
[● 41 SOURCES] The compromised data includes email addresses, phone numbers, vehicle registrations, and postcodes. www.saffronwaldenreporter.co.uk · cedarnews.net · ca.news.yahoo.com · londragazete.com · www.countytimes.co.uk · +35 more
[● 41 SOURCES] Passenger safety and aviation security were not compromised by the attack. www.saffronwaldenreporter.co.uk · cedarnews.net · ca.news.yahoo.com · londragazete.com · www.countytimes.co.uk · +35 more
[● 41 SOURCES] No bank or payment details were accessed during the breach. www.saffronwaldenreporter.co.uk · cedarnews.net · ca.news.yahoo.com · londragazete.com · www.countytimes.co.uk · +35 more
[● 41 SOURCES] The cyberattack affected Manchester, Stansted, and East Midlands airports. cedarnews.net · ca.news.yahoo.com · www.saffronwaldenreporter.co.uk · londragazete.com · www.countytimes.co.uk · +35 more
[● 7 SOURCES] The Rhysida ransomware group is demanding a ransom of 30 Bitcoin, approximately 2 million euros, from Berlin. www.pankower-allgemeine-zeitung.de · it.slashdot.org · www.berliner-zeitung.de · www.emarketerz.fr · nationalcybersecurity.com · +2 more
[● 6 SOURCES] The city of Berlin is being blackmailed by hackers following a data breach. www.pankower-allgemeine-zeitung.de · it.slashdot.org · www.berliner-zeitung.de · www.emarketerz.fr · nationalcybersecurity.com · +1 more
[● 4 SOURCES] The attackers demanded a ransom, which the company refused to pay. azeritimes.com · cybersecuritynews.com · avioblog.it · alsat.mk
[● 2 SOURCES] The online ‘Manage My Booking’ service at Stansted was temporarily suspended. www.saffronwaldenreporter.co.uk · www.security.nl
[● 2 SOURCES] The stolen data in Berlin includes information from 80,000 administrative proceedings and 46,500 contracts. www.pankower-allgemeine-zeitung.de · www.berliner-zeitung.de
[○ 1 SOURCE] Approximately 86 GB of customer and travel data was exfiltrated. www.it-boltwise.de

Timeline

about 2 months ago

[TECHNOLOGY] 2 sources
Manchester Airports Group data breach exposes 8.8 million people
A data breach at Manchester Airports Group has exposed the personal details of 8.8 million passengers across three UK airports following a ransom refusal by the extortion group FulcrumSec.
about 2 months ago

[TECHNOLOGY] 3 sources
Cyberattacks result in massive data leaks at UK airports and Australian firm
Cybercriminals have leaked the personal data of nearly nine million people following airport hacks in the UK and a significant data breach at an Australian building services company.
about 2 months ago

[TECHNOLOGY] 19 sources
Manchester Airports Group and Berlin targeted in major cyberattacks
Major cyberattacks have hit the Manchester Airports Group, exposing data of 8.7 million passengers, and the city of Berlin, which is refusing a 2 million euro ransom demand from the Rhysida ransomware group.
about 2 months ago

[TECHNOLOGY] 80 sources
Manchester Airports Group hit by cyberattack exposing 8.7 million customers' data
A cyberattack on Manchester Airports Group has exposed the personal data of 8.7 million customers across Manchester, Stansted, and East Midlands airports. No payment details were stolen.
2 months ago

[INTERNATIONAL] 2 sources
Manchester Airport flight disruptions following security breach
An unauthorized individual entering Manchester Airport's airfield caused a security breach on Friday night, forcing seven flight diversions and leaving at least 17 aircraft in holding patterns.

Sources

acb.ca · ad-hoc-news.de · adnKronos.com · aerotelegraph.com · aerotime.aero · airlive.net · aktual24.ro · aktuale.mk · alsat.mk · anninhthudo.vn · athensmagazine.gr · athina984.gr · aviation.direct · aviationpros.com · avioblog.it · avioradar.net · axadletimes.com · azeritimes.com · berliner-abendblatt.de · berliner-zeitung.de · bigodino.it · bolnews.com · ca.sports.yahoo.com · cedarnews.net · cnn.gr · complexdiscovery.com · countytimes.co.uk · cryptonomist.ch · cybernoz.com · cybersecuritynews.com · dagensps.se · egnews.it · egovernment.de · emarketerz.fr · en.dailypakistan.com.pk · enikos.gr · ethnos.gr · examiner.com.au · fjala.al · flagthis.com · flash.gr · fortunegreece.com · friatider.se · gazzetta.gr · haniotika-nea.gr · hosteltur.com · huffingtonpost.co.uk · ibtimes.co.uk

This summary has been updated 5 times: see revision history