Threat actor FulcrumSec has claimed responsibility for breaching Manchester Airport Group and has published 550GB of stolen data online. The incident represents a significant data exfiltration targeting UK aviation infrastructure, though specific details about the compromised systems or the nature of the stolen information remain limited.
Read full article at Infosecurity Magazine ↗An extortion group calling itself FulcrumSec has claimed responsibility for breaching Manchester Airports Group and stealing over 80 GB of data. The threat actors have indicated they plan to leak the stolen data online, following a typical extortion and data-leak approach.
Extortion group FulcrumSec claims to have stolen 86GB of data from Manchester Airports Group after discovering exposed API credentials in client-side JavaScript code. The breach affects multiple UK airports operated by MAG, including Manchester, London Stansted, and East Midlands, with the company's disclosure coming on August 27 followed by FulcrumSec's extortion claim two days later. The incident highlights the continued risk of credential exposure in web application code as a vector for large-scale data theft.
Nutex Health has confirmed a data breach affecting sensitive patient and employee information, along with financial and business records. The threat actors behind the incident have threatened to publicly release the stolen data, escalating pressure on the healthcare provider to respond.
The FBI is investigating a potential breach of idscan.net after 153 million driver's license scans surfaced for sale on the dark web. This incident represents a significant exposure of identity documents that could facilitate various fraud and identity theft schemes targeting individuals across potentially multiple jurisdictions.