Hackers Claim Theft of 86 GB of Passenger Data from Manchester Airports Group

Cyber‑security outfit FulcrumSec announced that it has extracted roughly 86 gigabytes of data from Manchester Airports Group (MAG), the operator of Manchester Airport and several regional facilities. The claim, posted on the group’s public channel, suggests a large‑scale breach that could affect millions of travelers who have used the airports over recent years.

Independent security site BleepingComputer corroborated part of FulcrumSec’s assertion by confirming the authenticity of a single traveler record found in the leaked material. The validation, based on cross‑checking personal identifiers against publicly available flight data, lends credence to the broader claim that the dump contains genuine customer information.

According to the sample files examined by analysts, the compromised set includes detailed booking histories, passenger names, contact details, flight itineraries and, in some cases, payment‑related data. The breadth of the information exceeds the limited description initially provided by MAG, which had only acknowledged a “potential data exposure” without specifying the categories of data involved.

MAG’s spokesperson responded that the company is cooperating with law‑enforcement agencies and that an internal investigation is underway. The airport group has warned affected passengers that they may be contacted for verification purposes but has not disclosed a timeline for a full public report. The limited initial disclosure has drawn criticism from privacy advocates who argue that transparency is essential for mitigating the fallout of such incidents.

The incident arrives amid a growing wave of cyber attacks targeting the aviation sector, where airlines, airports and service providers store extensive personal and financial data. Recent high‑profile breaches have prompted regulators in the United Kingdom and the European Union to tighten requirements around data protection and breach notification, underscoring the potential legal and reputational stakes for operators like MAG.

Authorities from the National Cyber Security Centre and local police are reportedly examining the breach, while security firms are advising travelers to monitor financial statements and consider identity‑theft protection measures. As investigations continue, the incident highlights the ongoing challenge of safeguarding vast volumes of passenger data against increasingly sophisticated threat actors.