Claim: Actor claims sale of 8.6 million Manchester Airports Group profiles
A threat actor on an underground forum is advertising a database it says contains 8,672,291 customer profiles from Manchester Airports Group, operator of Manchester, London Stansted and East Midlands airports. The offer includes upcoming travel itineraries for about 200,000 passengers, linked to personal data and vehicle details. The claim has not been verified by the company.
What happened
A threat actor on an underground forum is advertising a database of 8,672,291 customer profiles from Manchester Airports Group, operator of Manchester, London Stansted and East Midlands airports. The offer includes upcoming travel itineraries for about 200,000 passengers, linked to personal and vehicle data. The company has not confirmed an incident.
Why it matters
If confirmed, the exposure combines contact data, future trips and vehicle details, a useful mix for parking, booking and refund scams against travellers. The event, purchase and SMS counts suggest a marketing or customer-engagement platform rather than core airport systems, pointing to a third-party vendor as the likely source.
What to do
Monitor MAG's official channels for confirmation, prepare traveller warnings about scams using flight and parking data, and review access and contracts with vendors that handle customer data.
For the technical team
- Affected
- Manchester Airports Group (MAG), operadora dos aeroportos de Manchester, London Stansted e East Midlands; base alegada d · Manchester Airports Group customers, per the claim: 8,672,291 profiles in total (Manchester 4,387,221, London Stansted 3,530,009, East Midlands 755,061); upcoming itineraries for about 200,000 passengers with personal and vehicle data.
- Exploitation
- Sale claim on an underground forum, reported by DailyDarkWeb. MAG has not confirmed an incident. The sources cite no data use or ongoing exploitation.
- Fix
- Not applicable: alleged data leak, no software fix cited in the sources.
- Vector
- Method not described in the sources. DailyDarkWeb's analysis indicates the event, campaign and SMS counts point to a marketing or customer-engagement platform export rather than core airport systems, which would make a third-party vendor the likely source if the claim holds.
- More details
- The offer describes four archives, one per airport plus the customer database: Stansted at 36.4 GB (603M events, 1.2M purchases, 203K SMS messages) and Manchester at 19.6 GB (484M events). The same post claims access to databases on Iraqi airports. Unverified claim, no confirmation from MAG.
Timeline
First claim of the database sale appeared on an underground forum.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
