Crooks Behind Manchester Airports Group Hack Leaked Data of 8.8 Million People
FulcrumSec leaked about 550 GB of Manchester Airports Group data, exposing emails, phones and vehicle registrations of roughly 8.8 million people after a refused ransom.
Manchester Airports Group, operator of Manchester, London Stansted and East Midlands airports, confirmed a breach of a third-party database after extortion group FulcrumSec leaked roughly 550 GB of data. The exposed data includes about 8.8 million email addresses and phone numbers, 108,077 vehicle registration plates, 2.48 million purchases and 1.16 billion email events, with no payment-card data accessed. FulcrumSec claims it gained access using Iterable admin keys hardcoded in the frontend JavaScript of all three airport websites, a claim MAG has not confirmed. Have I Been Pwned added the incident to its breach database.
- Exposed data: emails, phones, vehicle registrations, postcodes, IPs, purchases; no payment-card data.
- FulcrumSec claims Iterable admin keys were hardcoded in all three airport websites' JavaScript.
- About 190,849 future bookings exposed travel schedules, creating burglary and stalking risks.
- MAG disclosed the incident August 27, contained the risk, and notified authorities.
- Vendors
- IterableHave I Been Pwned
- Products
- Iterable
- Threat actors
- FulcrumSec
- Victims
- Manchester Airports Group
- Organizations
- Manchester Airports GroupFulcrumSecHave I Been PwnedManchester AirportLondon StanstedEast Midlands Airport
- Countries
- United Kingdom
From the original article
4 min read at securityaffairs.com
Manchester Airports Group (MAG) data allegedly leaked by FulcrumSec exposes emails and phone numbers of 8. 8 million people. Manchester Airports Group, which operates Manchester, London Stansted and East Midlands airports, has confirmed a data breach involving customer information held in a third-party database.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.