Manchester Airports hackers publish data on 8.7 million people

Hackers who breached Manchester Airports Group (MAG) have posted data on 8.7 million people online after failing to extort the company, according to TechRadar.

The stolen information reportedly includes personally identifiable information (PII), including email addresses, phone numbers, vehicle registrations and postcodes. The hackers also claim the database contains booking history, travel dates, vehicle information, purchase references and customer profiles.

FulcrumSec has claimed responsibility for the attack. The group attempted to extort MAG, but the company refused to pay. FulcrumSec has now published the data in the hope that another cybercriminal group will pay for access.

MAG said it was confident that it had taken effective measures to protect customers and had contacted all affected people, including customers with upcoming bookings, about additional support.

David Sancho, Senior Threat Researcher at TrendAI, said the reported exposure was a major escalation from the information previously revealed about the breach. He said the data could support highly credible phishing campaigns using details that victims would expect only an airport or booking provider to know.

The hackers claim the database is “half a terabyte, and every byte of it is pure PII.” FulcrumSec is described as a relatively new data-extortion group that has reportedly been active since late 2025.