FulcrumSec has claimed the Manchester Airports Group breach and says it will leak more than 80GB of MAG data, turning the August 27 incident into a public extortion case. MAG had already said customer records tied to Manchester, Stansted, and East Midlands airports were taken from a third-party-hosted database.
The threatened dump is said to include detailed booking and travel information, plus the contact and travel context MAG already confirmed was exposed. That kind of data is useful for fraud because it can make phishing, account recovery abuse, and resale look authentic once it leaves the airport’s control.
For airlines, airports, and loyalty programs, the risk now extends beyond the original access event. If booking data is published, the exposure can keep working as fraud fuel long after containment inside MAG’s own systems, and the reporting still does not settle whether the full claimed haul is accurate.
A spokesperson told The Yorkshire Post that roughly 8.7 million people were impacted, although they did not provide a date range. They added that in the “vast majority” of cases, the only information accessed was an email address.
Customer data linked to bookings and airport Wi-Fi registrations at Manchester, Stansted and East Midlands airports has been accessed by an unauthorized third party
The Manchester Airports Group (MAG) disclosed that hackers breached its systems and stole customer data, including Wi-Fi sign-ups from Manchester, Stansted, and East Midlands airports.