Threat Intelligence Brief
Curated summary with source attribution
Source: digit.fyi
Threat Risk: Medium
Victim: Manchester Airport Group
Incident: Theft of customer personal information via a cyber-attack.
Impact: Exposure of PII for 8.7 million customers and temporary disruption of booking management services.
Attacker: Unidentified threat actors
Analysis: The breach targeted auxiliary services such as parking and lounge bookings, exposing a vast amount of PII without compromising financial data. While critical flight operations remained intact, the outage of the ‘Manage My Booking’ service indicates a level of operational disruption. This event highlights the ongoing vulnerability of critical transport infrastructure to targeted data exfiltration.
Recommendations: Remain vigilant against phishing emails that leverage leaked travel details; Implement strict access controls for third-party booking and auxiliary services; Conduct comprehensive audits of PII storage and encryption across infrastructure providers
Source: Digit.fyi
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source
Latest Developments
Update — 2026-09-02 14:09 UTC
Data breach via exposed admin keys in frontend JavaScript. Exposure of 8.7 million customer profiles and sensitive future travel schedules. The threat group FulcrumSec accessed Manchester Airport Group’s customer data by discovering administrative keys for the Iterable platform embedded in the frontend JavaScript of the airports’ root domains. This oversight allowed the exfiltration of nearly 550GB of PII, including detailed booking histories and future travel schedules. The incident underscores the severe risk of exposing secrets in client-side code accessible to any web visitor.
Corroborating source: infosecurity-magazine.com