Manchester Airports Group data breach
8,849,657 accounts exposed in a breach on 27 August 2026.
At a glance
8,849,657
Accounts exposed
27 August 2026
Date of the breach
2 September 2026
Added to the list
What happened
In August 2026, Manchester Airports Group (MAG) disclosed a data breach impacting their services. The incident was later claimed by the FulcrumSec hacking group, who subsequently published email addresses and phone numbers relating to 8.8M customers of Manchester, Stansted and East Midlands airports. The data contained personal information relating to airport services, including vehicle registrati
What was exposed
- Browser user agent details. Browser details were exposed. They show what you use but cannot be used to log in.
- Email addresses. Email addresses were exposed. Expect more spam and phishing aimed at those addresses.
- Geographic locations. General locations were exposed. They add to a profile of you.
- IP addresses. Internet addresses were exposed. They show roughly where and how you connect. They cannot be used to log in.
- Names. Names were exposed. Scammers use real names to make a message look personal.
- Phone numbers. Phone numbers were exposed. Expect scam calls and text messages, some of them pretending to be the organisation.
- Purchases. Records of what you bought were exposed. Scammers use them to make messages look genuine.
- Vehicle registration plates. This kind of data was included in the breach. Treat it as exposed and be careful with messages that use it.
What to do now
It depends on what was exposed, so these steps follow the list above.
If your contact details were exposed
- Expect more spam, scam calls and phishing. Do not click links or open attachments in messages you did not expect.
- If a message mentions this breach, do not reply. Go to the organisation's own website or app instead of using a link in the message.
Whatever was exposed
- Check which other breaches include your own email address and phone number.
- Keep an eye on your accounts for a few months. Breached data is often used long after the breach.
- If you think someone is using your details, report it to the organisation and to your national cyber crime reporting service.
Check your own exposure
- Password leak check: find out whether a password has appeared in a breach. The password never leaves your browser.
- Free domain security scan: grade the email, DNS and website security of a domain you own.
Related breaches
Other breaches that exposed some of the same kinds of data.
Oz Hair and Beauty
In August 2026, Australian beauty retailer Oz Hair and Beauty was the target of an xpl0itrs extortion attack.
- Email addresses
- Geographic locations
- Names
- Phone numbers
- +1 more
Read what happened
University of Nottingham
In June 2026, the University of Nottingham was the target of a cyber attack, later linked to a ShinyHunters "pay or leak" extortion campaign.
- Academic records
- Citizenship statuses
- Dates of birth
- Disabilities
- +11 more
Read what happened
Addi
In March 2026, the Colombian fintech company Addi identified unauthorised activity on its platform and advised customers that "it is possible that your personal…
- Age groups
- Credit scores
- Device information
- Email addresses
- +9 more
Read what happened