The FulcrumSec extortion group has claimed responsibility for the recently disclosed Manchester Airports Group (MAG) data breach.
The largest airport group in the UK, MAG owns and operates Manchester, London Stansted, and East Midlands airports.
MAG disclosed the incident on August 27, notifying customers that hackers stole data associated with car park, lounge, and Fast Track bookings, as well as in-airport Wi-Fi sign-ups at all three airports.
“We immediately contained the risk and have been working with specialist advisors and taking appropriate steps to protect our customers and systems. We have informed and are working with the relevant authorities,” MAG said.
The airport operator said email addresses, phone numbers, vehicle registrations, and postcodes were compromised in the incident. No payment information was accessed, and passenger safety and aviation security were not affected, it said.
“The incident has not resulted in any operational disruption. Airport operations remain unaffected, and customer parking services continue to operate normally,” MAG added.
While the airport operator has not revealed the number of impacted individuals, initial reports suggested that approximately 8.7 million customers might have had their information compromised.
MAG reportedly confirmed the data was stolen from “a database hosted by a third party”, and said it received a ransom demand from the attackers, but refrained from sharing further details on the threat actor and its demands.
Over the weekend, the FulcrumSec extortion group reportedly claimed responsibility for the incident and the theft of approximately 86 gigabytes of data from MAG, including detailed booking and travel information. The group apparently plans to leak the stolen information.
A financially motivated threat actor, FulcrumSec emerged in 2025 and has claimed several high-profile hacks, including Novo Nordisk and LexisNexis.
Related: Berlin Won’t Pay Extortion Group Claiming Data Theft
Related: Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign
Related: CareCloud Data Breach Impact Grows to 3.7 Million Individuals
Related: Heights Finance Data Breach Impacts at Least 1.2 Million Individuals
