FulcrumSec Breaches Manchester Airport Group, Leaks 550GB of PII

FulcrumSec has claimed responsibility for a significant data breach affecting the Manchester Airport Group (MAG), leaking nearly all of the 550GB of stolen data online. The breach reportedly includes personal identifiable information (PII) of approximately 8.7 million customers, such as names, email addresses, and mobile numbers. The attackers gained initial access through exposed admin keys found in the frontend JavaScript of MAG's websites. The leaked data also encompasses nearly 1.2 billion marketing events and detailed records of customer bookings. FulcrumSec stated that MAG declined to pay a ransom to protect the data, leading to the public leak. As of now, MAG has not provided any updates since their initial post on August 27. The breach poses a risk for follow-on phishing attacks targeting the affected individuals.

Key Points: • FulcrumSec leaked 550GB of data from Manchester Airport Group, affecting 8.7 million customers. • Attackers exploited exposed admin keys in frontend JavaScript on MAG's websites. • MAG has not responded since the initial breach announcement on August 27.