THE Manchester Airports Group (MAG) experienced a significant data breach resulting in the exposure of the personal information of 8.8 million customers. The breach, claimed by the extortion group FulcrumSec, involved data from parking, lounge, and Fast Track bookings. MAG confirmed no operational or security impacts on airport services but reported that sensitive information such as emails, phone numbers, and vehicle registration details were accessed, while payment card data remained secure.
The attackers exploited poorly secured administrator keys within the websites' JavaScript. The leaked data included customer profiles, booking history, and future travel schedules, raising concerns about targeted phishing attacks. MAG has since engaged specialists and notified relevant authorities, urging affected users to change passwords and implement multi-factor authentication.