Hackers Dump 8.7 Million Airport Customers' Data on the Open Internet
Want more insights like this?
8.7 million people are at risk after hackers breached Manchester Airports Group (MAG) — operator of Manchester, Stansted, and East Midlands airports — and published the stolen data online for free. The group extorted MAG for an undisclosed sum, failed to get paid, and dumped half a terabyte in response: "every byte of it is pure PII," they wrote.
HaveIBeenPwned analyzed the published files and confirmed they hold email addresses, phone numbers, addresses, license plate numbers, purchasing history, and browsing device data. Unlike most hacker leak sites, this one sits on the open internet rather than the dark web, making it easy for anyone to reach.
Cybersecurity expert Kevin Beaumont warned that wealthy or high-profile individuals face particular risk, since the data covers both past locations and planned future travel. Everyone else should watch for scammers who now know their phone number and car registration. MAG says it has contacted all those affected, including people with upcoming bookings.
The gang boasted that it broke into MAG and its other recent victims the same way each time — exploiting weaknesses in how companies store the digital keys to their internal networks.
Source: BBC News