FulcrumSec has claimed the Manchester Airports Group breach and says it will leak more than 80GB of MAG data, turning the August 27 incident into a public extortion case. MAG had already said customer records tied to Manchester, Stansted, and East Midlands airports were taken from a third-party-hosted database.
The threatened dump is said to include detailed booking and travel information, plus the contact and travel context MAG already confirmed was exposed. That kind of data is useful for fraud because it can make phishing, account recovery abuse, and resale look authentic once it leaves the airport’s control.
For airlines, airports, and loyalty programs, the risk now extends beyond the original access event. If booking data is published, the exposure can keep working as fraud fuel long after containment inside MAG’s own systems, and the reporting still does not settle whether the full claimed haul is accurate.