UK Airport Group Hit by Major Cyber Breach Affecting 8.7 Million Passengers
The Manchester Airports Group (MAG), the largest airport operator in the United Kingdom, has fallen victim to a major cybersecurity incident that exposed the personal data of approximately 8.7 million passengers. The breach, which was disclosed on August 27, impacted customers who booked car parking, airport lounge access, Fast Track passes, and Wi-Fi services across Manchester, London Stansted, and East Midlands airports.
Following the initial breach disclosure, an extortion group named FulcrumSec claimed responsibility for the intrusion, stating that it exfiltrated more than 80 gigabytes of sensitive data from backend infrastructure. The stolen records include customer names, email addresses, contact phone numbers, home postcodes, vehicle registration numbers, and historical booking details. On September 2, the threat actors reportedly began leaking the stolen dataset online after MAG refused to pay the demanded ransom fee.
Importantly, MAG confirmed that the compromised backend systems did not contain financial details, payment card numbers, or passwords. Operational systems responsible for flight handling, air traffic management, and passenger security remained entirely unaffected, allowing normal airport operations to continue without interruption. However, cybersecurity experts caution that the leak of extensive personally identifiable information elevates the risk of targeted phishing, identity fraud, and credential-stuffing campaigns against affected travelers. The airport operator has notified relevant regulatory authorities, including the Information Commissioner's Office, and is actively working with law enforcement and external cybersecurity specialists to contain the fallout and advise passengers on proactive digital safety measures.
