Manchester Airports Group data breach

What happened

According to HIBP and reporting by Bleeping Computer, Manchester Airports Group (MAG) disclosed a data breach in August 2026. The FulcrumSec hacking group later claimed responsibility and published stolen data, reportedly totalling 86 GB, belonging to customers across three airports.

What was exposed

According to HIBP, the exposed data included names, email addresses, phone numbers, IP addresses, geographic locations, browser user agent details, vehicle registration plates, and purchase records. Reported by Bleeping Computer, the purchase data related to airport services such as parking history, Fast Track bookings, and lounge reservations.

Who is affected

Approximately 8.8 million customers of Manchester Airport, Stansted Airport, and East Midlands Airport are reported to be affected. These are individuals who used airport services that MAG operates.

What to do now

Watch for phishing emails or calls using your name, phone number, or travel details, as this information was exposed.
If you used the same email address and password elsewhere, change those passwords and enable two-factor authentication.
Be cautious of anyone contacting you with knowledge of your vehicle registration or parking history, as this could be used in targeted scams.
Monitor your accounts for any suspicious activity and consider placing a fraud alert if you are concerned about identity misuse.