FulcrumSec Claims Theft of 86 GB in Manchester Airports Group Breach
Summary
FulcrumSec claims it stole 86 GB from Manchester Airports Group. BleepingComputer reviewed samples indicating detailed customer and travel data exposure, but could not verify the dataset’s full size or the group’s claimed access method.
Key points
- MAG disclosed that an unauthorized third party stole customer data related to Manchester, London Stansted, and East Midlands airports.
- FulcrumSec claimed responsibility and said it stole about 86 GB; BleepingComputer could not independently verify the dataset’s full size or source.
- A sampled record matched a traveller’s known Manchester Airport purchase history; reviewed data included booking details, travel history, and other personal information.
- The group claimed it accessed airport-specific Iterable API credentials exposed in client-side JavaScript; this access method was not independently verified.
- FulcrumSec claimed the data included nearly 200,000 records about upcoming travel in 2026, a claim BleepingComputer could not verify.
- MAG said affected customers had been contacted and reported no operational disruption or impact to passenger safety or aviation security.
- The exposed details could support targeted phishing or scam attempts; BleepingComputer did not observe payment-card or bank-account information in the reviewed samples.
Article Details
- Victim Organization
- Manchester Airports Group (MAG)
- Incident Type
- Customer data breach and alleged data extortion
- Data Types Exposed
- Email addresses
- Phone numbers
- Vehicle registrations
- Postcodes
- Booking and purchase references
- Airport and product selections
- Prices and discounts
- Booking status
- Parking dates and times
- Historical booking activity and spending
- Scheduled arrival times
- Terminal used
- IP addresses
- Approximate locations
- Device information
- Customer-engagement data
- Marketing classifications
- Upcoming-travel details
- Affected Records
- MAG reportedly said around 8.7 million customers were affected, with email addresses exposed for the vast majority. FulcrumSec alleged that nearly 200,000 records concerned upcoming travel; BleepingComputer could not independently verify that figure.
- Affected Data Size
- FulcrumSec claimed it stole approximately 86 GB. BleepingComputer could not independently verify the overall dataset size.
- Operational Impact
- MAG said there was no operational disruption and passenger safety and aviation security were not compromised.
- Ransom Or Extortion
- FulcrumSec reportedly demanded a monetary ransom, which MAG was understood to have refused. FulcrumSec said it intended to publish the data, but was considering withholding or redacting records due to potential real-world harm.
- Claim Status
- claimed