Knowledge allegedly stolen from the Manchester Airports Group (MAG) and leaked on-line this week consists of the e-mail addresses and telephone numbers of 8.8 million individuals.
MAG disclosed the incident final week, warning that hackers had breached its methods, stealing automotive park, lounge, and Quick Observe reserving knowledge, together with in-airport Wi-Fi sign-ups on the Manchester, London Stansted, and East Midlands airports.
The airport operator disclosed that hackers had exfiltrated e mail addresses, telephone numbers, car registrations, and postcodes, noting that its operations weren’t affected by the incident.
MAG confirmed that the stolen info was saved in a database hosted by a 3rd occasion and that it acquired a ransom demand from the attackers, however kept away from sharing additional particulars on the matter.
Over the weekend, the FulcrumSec extortion gang claimed accountability for the assault and has since printed roughly 550 gigabytes of uncompressed knowledge allegedly stolen from MAG.
The information, the group says, consists of the non-public info of roughly 8.7 million people, together with names, emails, telephone numbers, city and postal area, and residential IP addresses used to entry accounts.
In response to knowledge breach notification web site HaveIBeenPwned, which parsed the dataset and added it to its database, roughly 8.8 million e mail addresses and telephone numbers had been compromised. Names, browser agent particulars, purchases, and car registration plates had been additionally uncovered.
FulcrumSec says the stolen knowledge consists of 2,482,763 purchases (bookings for parking, lounge, and fast-track merchandise), 461,433 SMS messages related to bookings, automotive park, and car registration, and 108,077 distinctive UK car registration plates.
Moreover, the extortion group claims to have exfiltrated MAG platform’s configuration. SecurityWeek has not independently verified the attackers’ claims.
FulcrumSec says it breached MAG’s methods utilizing admin keys that had been left in plain sight “within the frontend JavaScript of every of its three airports’ web sites”, in every root area.
The extortion group has admitted that MAG didn’t pay a ransom.
Associated: 153 Million Driver License Photographs Supplied on Darkish Net
Associated: Ransomware Gang Claims Nutex Well being Knowledge Breach
Associated: 9.5 Million Impacted by Aesto Well being Knowledge Breach
Associated: Berlin Gained’t Pay Extortion Group Claiming Knowledge Theft
