THE extortion group FulcrumSec has claimed responsibility for a major data breach involving 86GB of data from the Manchester Airports Group (MAG). This breach, which MAG disclosed on August 27, affects customers of Manchester, London Stansted, and East Midlands airports, impacting around 8.7 million individuals, though MAG stated most had only email addresses exposed.
However, FulcrumSec presented evidence of much more sensitive information, including approximately 200,000 records of travel-related details connected to personally identifiable information. The breach reportedly stemmed from API credentials that were exposed in client-side JavaScript, which could have been accessed by anyone inspecting the website. FulcrumSec plans to release the stolen data and potentially redact sensitive upcoming travel information to avoid phishing risks. MAG maintained that no payment card or banking details were compromised and asserted they had taken steps to protect affected customers.