FulcrumSec leaks data of 8.8M Manchester Airports Group customers after August 2026 breach
In August 2026, Manchester Airports Group (MAG) disclosed a data breach affecting its services. The FulcrumSec hacking group later claimed the incident and published data relating to 8.8M customers of Manchester, Stansted and East Midlands airports. The leaked data includes email addresses and phone numbers, along with airport service records such as vehicle registrations, parking history, Fast Track purchases and lounge bookings. MAG stated that "at no point has passenger safety or aviation security been compromised". The breach was added to Have I Been Pwned on 2 Sep 2026.
Technical Details
- The article does not describe the initial access vector, the intrusion method or any malware used.
- Exposed data types: email addresses, phone numbers, vehicle registrations, parking history, Fast Track purchases and lounge bookings.
- The data was published by the threat actor, so it is available for reuse in phishing and social engineering.
Remediation
- Affected customers should expect targeted phishing and smishing that references airport services, parking or lounge bookings.
- Change passwords that may have been reused and enable 2FA wherever it is supported.
- Use a password manager to generate and store unique passwords.
Linha do tempo
-
FulcrumSec leaks data of 8.8M Manchester Airports Group customers after August 2026 breach
ler a análise desta fonte ocultar
In August 2026, Manchester Airports Group (MAG) disclosed a data breach affecting its services. The FulcrumSec hacking group later claimed the incident and published data relating to 8.8M customers of Manchester, Stansted and East Midlands airports. The leaked data includes email addresses and phone numbers, along with airport service records such as vehicle registrations, parking history, Fast Track purchases and lounge bookings. MAG stated that "at no point has passenger safety or aviation security been compromised". The breach was added to Have I Been Pwned on 2 Sep 2026.
Technical Details
- The article does not describe the initial access vector, the intrusion method or any malware used.
- Exposed data types: email addresses, phone numbers, vehicle registrations, parking history, Fast Track purchases and lounge bookings.
- The data was published by the threat actor, so it is available for reuse in phishing and social engineering.
Remediation
- Affected customers should expect targeted phishing and smishing that references airport services, parking or lounge bookings.
- Change passwords that may have been reused and enable 2FA wherever it is supported.
- Use a password manager to generate and store unique passwords.