--- title: FulcrumSec claims Manchester Airports hack, theft of 86... description: Extortion group FulcrumSec claims responsibility for the Manchester Airports Group breach, saying it stole roughly 86 GB of data, including a 21.5 GB customer... canonical: https://daily.dev/posts/fulcrumsec-claims-manchester-airports-hack-theft-of-86-gb-of-data-xbykrase4 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: FulcrumSec claims Manchester Airports hack, theft of 86 GB of data | daily.dev og:description: Extortion group FulcrumSec claims responsibility for the Manchester Airports Group breach, saying it stole roughly 86 GB of data, including a 21.5 GB customer... og:url: https://daily.dev/posts/fulcrumsec-claims-manchester-airports-hack-theft-of-86-gb-of-data-xbykrase4 og:image: https://api.daily.dev/og/posts/xbYkrAsE4.png og:image:alt: FulcrumSec claims Manchester Airports hack, theft of 86 GB of data og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # FulcrumSec claims Manchester Airports hack, theft of 86 GB of data **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 4 min read · 0 upvotes · 0 comments ## Summary Extortion group FulcrumSec claims responsibility for the Manchester Airports Group breach, saying it stole roughly 86 GB of data, including a 21.5 GB customer export and nearly 200,000 records tied to upcoming 2026 travel. BleepingComputer validated one traveler's record and found the exposed data appears far more detailed than MAG initially disclosed, including purchase references, booking status, IP addresses, device data, and full UK postcodes, though no payment card data was found. FulcrumSec claims access came via exposed Iterable API credentials in client-side JavaScript. MAG declined to confirm the specific claims but says around 8.7 million customers were affected overall, making this the largest known data breach at a British airport operator. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What data did FulcrumSec claim to steal from Manchester Airports Group? FulcrumSec claimed to have stolen approximately 86 GB of data, including a 21.5 GB Manchester customer export with consolidated profiles combining customer identifiers with booking history and marketing classifications, plus nearly 200,000 records tied to upcoming 2026 travel. Sampled records included purchase references, booking status, parking dates, IP addresses, device information, and full UK postcodes, though no payment-card or bank data was observed. _Follow daily.dev for developments on data breach disclosures like this one affecting millions of travelers._ ### How did FulcrumSec claim to gain access to Manchester Airports Group's data? FulcrumSec claims it obtained access using airport-specific Iterable API credentials that were exposed in client-side JavaScript. This allowed the group to allegedly extract consolidated customer profiles and booking records tied to Manchester, London Stansted, and East Midlands airports, though the exact scope of access could not be independently verified. _Developers auditing client-side code for exposed API keys can track incidents like this on daily.dev._ ### How many customers were affected by the Manchester Airports Group data breach? Around 8.7 million customers were affected, though only email addresses were exposed for the vast majority of them, according to a MAG spokesperson. This makes it the largest known customer data breach affecting a British airport operator, with additional details like vehicle registrations, postcodes, and booking data exposed for a smaller subset. _daily.dev helps security teams stay current on breach scale and disclosure patterns like this incident._ ## Similar posts on daily.dev - [No Hacking Required: The Manchester Airports Group Data Breach](https://daily.dev/posts/no-hacking-required-the-manchester-airports-group-data-breach-kate9lrto) · Scott Helme · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#phishing](https://daily.dev/tags/phishing), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/fulcrumsec-claims-manchester-airports-hack-theft-of-86-gb-of-data-xbykrase4) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"FulcrumSec claims Manchester Airports hack, theft of 86 GB of data","url":"https://daily.dev/posts/fulcrumsec-claims-manchester-airports-hack-theft-of-86-gb-of-data-xbykrase4","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/fulcrumsec-claims-manchester-airports-hack-theft-of-86-gb-of-data-xbykrase4"},"datePublished":"2026-08-30T15:01:23.773Z","dateModified":"2026-09-02T07:44:13.712Z","description":"Extortion group FulcrumSec claims responsibility for the Manchester Airports Group breach, saying it stole roughly 86 GB of data, including a 21.5 GB customer...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/457b40b7a6f0980725de5ee4d6bbbac9?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/457b40b7a6f0980725de5ee4d6bbbac9?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/fulcrumsec-claims-manchester-airports-hack-theft-of-86-gb-of-data-xbykrase4","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,phishing,data-breach","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"FulcrumSec claims Manchester Airports hack, theft of 86 GB of data"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/fulcrumsec-claims-manchester-airports-hack-theft-of-86-gb-of-data-xbykrase4#faq","mainEntity":[{"@type":"Question","name":"What data did FulcrumSec claim to steal from Manchester Airports Group?","acceptedAnswer":{"@type":"Answer","text":"FulcrumSec claimed to have stolen approximately 86 GB of data, including a 21.5 GB Manchester customer export with consolidated profiles combining customer identifiers with booking history and marketing classifications, plus nearly 200,000 records tied to upcoming 2026 travel. Sampled records included purchase references, booking status, parking dates, IP addresses, device information, and full UK postcodes, though no payment-card or bank data was observed. Follow daily.dev for developments on data breach disclosures like this one affecting millions of travelers."}},{"@type":"Question","name":"How did FulcrumSec claim to gain access to Manchester Airports Group's data?","acceptedAnswer":{"@type":"Answer","text":"FulcrumSec claims it obtained access using airport-specific Iterable API credentials that were exposed in client-side JavaScript. This allowed the group to allegedly extract consolidated customer profiles and booking records tied to Manchester, London Stansted, and East Midlands airports, though the exact scope of access could not be independently verified. Developers auditing client-side code for exposed API keys can track incidents like this on daily.dev."}},{"@type":"Question","name":"How many customers were affected by the Manchester Airports Group data breach?","acceptedAnswer":{"@type":"Answer","text":"Around 8.7 million customers were affected, though only email addresses were exposed for the vast majority of them, according to a MAG spokesperson. This makes it the largest known customer data breach affecting a British airport operator, with additional details like vehicle registrations, postcodes, and booking data exposed for a smaller subset. daily.dev helps security teams stay current on breach scale and disclosure patterns like this incident."}}]} ```