Data Breaches & Leaks SecurityWeek 1 month ago

Extortion Group Claims Manchester Airports Group Data Breach

CN
CyberNew Threat Research Desk
• Original Reporting: SecurityWeek
CyberNew Threat Intel Assessment
Assessed Severity: HIGH
Impacted Surface
Enterprise Data & Identity Stores
Intelligence Sector
Data Breaches & Leaks

Analyst Takeaway

"The FulcrumSec extortion group has claimed responsibility for the recently disclosed Manchester Airports Group (MAG) data breach. The largest airport group in the UK, MAG owns and operates Manchester, London Stansted, and East Midlands airports. MAG disclosed the incident on August 27, notifying customers that hackers stole data associated with car park, lounge, and Fast Track bookings, as well..."

Recommended Defense & Mitigation

  • Access Review: Audit administrative roles, enforce phishing-resistant MFA, and review privilege escalations.
  • Credential Rotation: Rotate high-privilege service credentials and tokens associated with impacted services.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Ransomware attack hits airports

The FulcrumSec extortion group has claimed responsibility for the recently disclosed Manchester Airports Group (MAG) data breach.

The largest airport group in the UK, MAG owns and operates Manchester, London Stansted, and East Midlands airports.

MAG disclosed the incident on August 27, notifying customers that hackers stole data associated with car park, lounge, and Fast Track bookings, as well as in-airport Wi-Fi sign-ups at all three airports.

“We immediately contained the risk and have been working with specialist advisors and taking appropriate steps to protect our customers and systems. We have informed and are working with the relevant authorities,” MAG said.

The airport operator said email addresses, phone numbers, vehicle registrations, and postcodes were compromised in the incident. No payment information was accessed, and passenger safety and aviation security were not affected, it said.

“The incident has not resulted in any operational disruption. Airport operations remain unaffected, and customer parking services continue to operate normally,” MAG added.

Advertisement. Scroll to continue reading.

While the airport operator has not revealed the number of impacted individuals, initial reports suggested that approximately 8.7 million customers might have had their information compromised.

Written By Ionut Arghire

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from SecurityWeek.

Primary Advisory →