THE Manchester Airports Group (MAG) announced a significant data breach affecting approximately 8.8 million individuals, involving the theft of personal information such as email addresses, phone numbers, vehicle registrations, and more. The breach occurred due to a cyberattack by the FulcrumSec extortion gang, which claimed to have exfiltrated about 550 gigabytes of data, including 2.4 million bookings and vehicle registration plates.
MAG reported that the stolen data was kept on a third-party database and that the attackers demanded ransom, but MAG did not comply. Notably, the attackers utilized admin keys left exposed in the JavaScript of MAG's website.