Manchester Airport Group Data Breach: Hackers Leak 8.7 Million Records After Failed Extortion
Hackers behind the breach of Manchester Airport Group (MAG) have released a trove of stolen data online after failing to extort the company. The leaked dataset, posted by the group FulcrumSec, contains personally identifiable information (PII) on 8.7 million individuals, including email addresses, phone numbers, vehicle registrations, and postcodes.
MAG confirmed the breach, stating it had implemented protective measures and notified affected customers, including those with upcoming bookings. The company refused to pay the ransom, aligning with cybersecurity best practices to discourage future extortion attempts.
FulcrumSec, a relatively new but increasingly active data-extortion group, reportedly used large language models (LLMs) to analyze the stolen data, heightening concerns over AI-driven phishing campaigns. The exposed information such as booking histories, travel dates, and purchase references could enable highly targeted scams, with criminals leveraging details only known to the airport or booking providers.
Security experts warn that the breach poses significant risks, as the data allows for credible phishing and social-engineering attacks at scale. FulcrumSec, active since late 2025, specializes in stealing sensitive information and threatening disclosure rather than encrypting systems.
The leaked database, described by the hackers as "half a terabyte of pure PII," underscores the severity of the incident, with potential long-term consequences for affected individuals. MAG has pledged to update customers as more details emerge.
MAG (Airports Group) cybersecurity rating report: https://www.rankiteo.com/company/manchester-airports-group
"id": "MAN1788366466",
"linkid": "manchester-airports-group",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '8.7 million individuals',
'industry': 'Airport/Aviation',
'location': 'Manchester, UK',
'name': 'Manchester Airport Group (MAG)',
'type': 'Organization'}],
'customer_advisories': 'MAG has pledged to update customers as more details '
'emerge',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '8.7 million',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (Personally Identifiable '
'Information)',
'type_of_data_compromised': ['Email addresses',
'Phone numbers',
'Vehicle registrations',
'Postcodes',
'Booking histories',
'Travel dates',
'Purchase references']},
'description': 'Hackers behind the breach of Manchester Airport Group (MAG) '
'have released a trove of stolen data online after failing to '
'extort the company. The leaked dataset, posted by the group '
'FulcrumSec, contains personally identifiable information '
'(PII) on 8.7 million individuals, including email addresses, '
'phone numbers, vehicle registrations, and postcodes. The '
'breach poses significant risks for credible phishing and '
'social-engineering attacks at scale.',
'impact': {'brand_reputation_impact': 'Significant',
'data_compromised': '8.7 million records',
'identity_theft_risk': 'High'},
'motivation': 'Extortion',
'ransomware': {'data_encryption': 'No',
'data_exfiltration': 'Yes',
'ransom_demanded': 'Yes',
'ransom_paid': 'No'},
'references': [{'source': 'Cyber Incident Description'}],
'response': {'communication_strategy': 'Notified affected customers, '
'including those with upcoming '
'bookings',
'containment_measures': 'Protective measures implemented',
'incident_response_plan_activated': 'Yes'},
'threat_actor': 'FulcrumSec',
'title': 'Manchester Airport Group Data Breach: Hackers Leak 8.7 Million '
'Records After Failed Extortion',
'type': 'Data Breach'}