FulcrumSec Claims Responsibility for Manchester Airport Group Breach
FulcrumSec leaked ~549GB of Manchester Airport Group data, claiming 8.7M customer profiles exposed via exposed Iterable admin keys.
FulcrumSec posted around 549GB of uncompressed stolen Manchester Airport Group (MAG) data on its leak site, claiming nearly 8.7 million customer profiles with email, name, phone, home town, postcode and residential IP. The group said initial access came from Iterable platform admin keys exposed in the root-domain JavaScript of the Manchester, Stansted and East Midlands airport websites. Allegedly stolen data also includes ~1.2 billion marketing events, 2.5 million bookings, 461,000 SMS records, 108,000 vehicle plates and ~191,000 future bookings. MAG has provided no update since August 27 and the claims remain unverified.
- Admin keys sat in site root-domain JavaScript, visible to any visitor via dev tools
- Data could enable convincing phishing and physical targeting of future travelers, possibly including officials
- Group says MAG declined to pay a fee, and sensitive portions were removed before publication
- Follows earlier FulcrumSec breaches of Arup Group and Novo Nordisk
- Vendors
- Iterable
- Threat actors
- FulcrumSec
- Countries
- United Kingdom
From the original article
2 min read at infosecurity-magazine.com
Threat group FulcrumSec claims MAG breach and leaks 550GB of data online
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.