FulcrumSec Publishes Manchester Airports Group Data After Extortion Attempt

Hackers linked to FulcrumSec have published a database containing data on more than 8.7 million people after an unsuccessful extortion attempt against Manchester Airports Group (MAG).

The attackers reportedly sought a settlement from MAG, promising not to release the information if the company paid. MAG refused to pay. FulcrumSec then listed the 500GB database for sale on the dark web and later offered it for free, a move intended to increase the potential damage and reputational impact of the breach.

The database reportedly includes email addresses, phone numbers, vehicle registrations and postcodes. Cybersecurity experts said the information could be used by other criminal groups for targeted phishing and scam campaigns. They also warned that combinations of contact details, vehicle registrations and location information could create further risks for affected passengers and airport users.

The incident reflects a broader shift in how data breaches are exploited. When stolen information is released publicly, it can create opportunities for additional criminals even if the original attackers do not receive payment. Experts said MAG’s refusal to pay followed official guidance against funding extortion, but the publication of nearly nine million records leaves affected people exposed to consequences they did not choose.