FulcrumSec claims Manchester Airports hack, theft of 86 GB of data

{"#FulcrumSec Claims":"FulcrumSec, a data extortion group, claims responsibility for a data breach at Manchester Airports Group (MAG). The breach involved the theft of approximately 86 GB of data, including customer, booking, and travel information. FulcrumSec shared samples of the stolen data with BleepingComputer, which validated one record by comparing it with the traveller's known Manchester Airport purchase history. The stolen data includes nearly 200,000 records related to upcoming travel during the remainder of 2026. MAG, the United Kingdom's largest airport operator, disclosed the breach on August 27, stating that the affected information came from car park, lounge, and Fast Track bookings and in-airport Wi-Fi registrations. MAG declined to address FulcrumSec's claims, stating that it has contacted all affected customers and advised them to remain vigilant for suspicious emails, text messages, and telephone calls. The breach has not caused operational disruption, and MAG says passenger safety and aviation security were not compromised.","#Data Theft Details":"The stolen data includes purchase and booking references, airport and product selections, prices, discounts, booking status, parking dates and times, historical spending, IP addresses, approximate locations, device information, and customer-engagement data. BleepingComputer did not observe payment-card or bank-account information in the reviewed samples. The breach could allow attackers to reference a victim's airport, vehicle, parking dates, booking status, or purchased services in convincing phishing emails, text messages, or telephone scams impersonating MAG or a booking provider. MAG has contacted affected customers and advised them to remain vigilant for suspicious communications.","#Prevention and Security":"The breach underscores the importance of robust data protection measures. Once attackers have valid credentials, prevention drops sharply. According to the Blue Report 2026, only 37% of their actions are blocked. The breach also highlights the potential for sensitive information to be exposed, which could be used for identity theft or other malicious activities. The incident has not caused operational disruption, but it raises concerns about the security of customer data at major airports."}