GoKawiilFulcrumSec claims theft of 86GB from Manchester Airports Group in data breach
Extortion group FulcrumSec has claimed responsibility for a breach at Manchester Airports Group, saying it stole roughly 86GB of customer data across Manchester, London Stansted and East Midlands airports. BleepingComputer verified sample records against a real traveler's purchase history, finding detailed booking, payment and travel information beyond what MAG initially disclosed. The hackers allege they used exposed Iterable API credentials found in client-side JavaScript to access the data, including nearly 200,000 records tied to travel scheduled through 2026.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident shows how a single exposed API key in front-end code can expose years of granular customer travel and payment history, far beyond what companies initially admit in breach disclosures. With FulcrumSec threatening to publish the data, affected travelers face heightened risks of targeted phishing, fraud, or physical-security profiling based on precise flight and booking details.
- FulcrumSec claims to have stolen 86GB of data from Manchester Airports Group, including detailed booking and payment records.
- The breach reportedly stems from exposed Iterable API credentials embedded in client-side JavaScript code.
- Nearly 200,000 records covering travel scheduled through 2026 may be published unless hackers redact them.
YubiKey 5C NFC Security Key — When breaches like the Manchester Airports Group incident spill booking and account details, strong account protection matters more than ever. The YubiKey 5C NFC adds hardware-based two-factor authentication to email, travel, and banking logins, so a leaked password alone isn't enough. It taps via NFC on a phone or plugs into USB-C, making it easy to carry on trips.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-08-30
Published there as: “FulcrumSec claims Manchester Airports hack, theft of 86 GB of data”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.