Extortion Group Claims Manchester Airports Group Data Breach

FulcrumSec, a financially motivated extortion group active since 2025, claimed responsibility for a data breach at Manchester Airports Group, stealing about 86 GB of data from a third-party hosted database. The stolen data includes detailed booking and travel information for customers of MAG's airports. MAG disclosed the breach on August 27, 2026, confirming that personal data such as email addresses, phone numbers, vehicle registrations, and postcodes were compromised. No payment or security-sensitive data was accessed, and airport operations were unaffected. MAG received a ransom demand but has not disclosed further details about the threat actor or negotiations. FulcrumSec has a history of high-profile hacks and extortion attempts.

The breach exposed personal data of potentially millions of customers, including contact details and travel-related information, which could lead to privacy violations and targeted phishing or extortion attempts. However, no payment information or aviation security data was compromised, and there was no operational impact on airport services. The threat actor's plan to leak the data publicly increases the risk of further misuse of the stolen information.

MAG has contained the breach and is working with specialist advisors and relevant authorities. Customers should be informed about the breach and advised to remain vigilant for phishing or social engineering attempts using the compromised data. No direct patch or fix applies as the breach involved a third-party hosted database. Organizations should review third-party security controls and incident response plans. Monitor official communications from MAG and law enforcement for updates.