Extortion Group FulcrumSec Claims 86GB Manchester Airports Data Theft
Extortion group FulcrumSec claims stealing 86GB of Manchester Airports Group data, exposing 8.7 million customers' personal and booking details.
Manchester Airports Group disclosed a breach on August 27 affecting parking, lounge, Fast Track and WiFi registrations at Manchester, London Stansted and East Midlands airports, impacting 8.7 million customers, most exposed only email addresses. FulcrumSec claims it stole about 86GB via airport-specific Iterable API credentials exposed in client-side JavaScript, including a 21.5GB Manchester export with booking histories, marketing data and nearly 200,000 records on upcoming 2026 travel. BleepingComputer verified sample records against a real traveler's Fast Track history; MAG declined to address the group's specific claims. Researchers warn the combination of UK postcodes, vehicle registrations and booking details could enable convincing targeted phishing, and MAG says no payment card or banking data was exposed.
- MAG confirmed the breach August 27, affecting car park, lounge, Fast Track and WiFi registrations at three UK airports.
- FulcrumSec claims 86GB of data was obtained using Iterable API credentials exposed in client-side JavaScript.
- Allegedly ~200,000 records cover upcoming travel through 2026 with dates, times and PII.
- UK postcodes plus booking data create strong targeted phishing risk; publishing may redact upcoming trips.
- Second major UK/European aviation hit in 12 months, after September 2025 Collins Aerospace ransomware.
- Vendors
- IterableBleepingComputer
- Threat actors
- FulcrumSec
- Victims
- Manchester Airports Group
- Organizations
- Collins AerospaceSecurity Affairs
- Countries
- UK
From the original article
3 min read at securityaffairs.com
Extortion group FulcrumSec claims they stole 86GB of Manchester Airports Group data after finding API credentials exposed in client-side JavaScript. Manchester Airports Group (MAG) disclosed a data breach on August 27 affecting customers of Manchester, London Stansted, and East Midlands airports.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.