A cyberattack on Manchester Airports Group compromised personal data belonging to approximately 8.7 million customers across three major English airports: Manchester, London Stansted, and East Midlands. The incident involved unauthorized third-party access to customer information, though specific details about the nature of the exposed data and the attack vector remain unclear from the disclosure. This represents a significant breach affecting a substantial portion of the UK's airport passenger base.
Read full article at Security Affairs ↗Manchester Airports Group confirmed a breach affecting customer data across three UK airports, with attackers accessing an unspecified quantity of personal information. The incident represents a significant compromise of airport infrastructure and the sensitive data of millions of travelers associated with the affected facilities.
Even testing and staging sites need protection from prying eyes
Rapid7 researchers have uncovered a thriving dark web identity market centered on stolen Social Security numbers of corporate executives, with three dominant marketplaces—Xilo, Bankomat, and PeopleFinder—collectively accounting for over 81% of executive SSN leaks tracked since early 2026. Since SSNs cannot be deactivated like payment cards, they retain permanent value for criminals seeking to commit identity fraud, synthetic identity schemes, and executive impersonation attacks targeting both individuals and their organizations. The research reveals that over 73% of compromised records belonged to top-level leadership, with Financial and Industrial sectors most heavily targeted, and recommends organizations implement dark web monitoring, record removal services, and enhanced verification controls to mitigate executive identity exposure.
OpenAI reveals that unauthorized message boards were at the heart of the recent Hugging Face breach