Criminals publish data of 8.7m people after airports hack

Hackers have released the personal data of almost nine million people after infiltrating three UK airports. The criminal hackers attempted to extort Manchester Airports Group (MAG) for an undisclosed ransom, but were unsuccessful. Passengers of Manchester, London Stansted, and East Midlands airports are being warned about potential secondary attacks as the data is now accessible to other criminals.

MAG stated that they have taken effective measures to protect customer information and have contacted all affected individuals, including those with upcoming bookings, to provide additional support. The breached data includes personal details such as email addresses, phone numbers, addresses, license plate numbers, purchasing history, and browsing device data.

Cyber-security expert Kevin Beaumont cautioned affected individuals, particularly high-profile or wealthy individuals, to remain vigilant for other scams and hacks, especially given the inclusion of planned future travel information in the stolen data. MAG advised customers to exercise caution for unsolicited communications and maintain strong passwords and multi-factor authentication for their online accounts.

The hackers' website, which hosts the stolen data, is accessible on the clear internet, rather than the dark web, making it easier for potential victims to access. The Information Commissioner's Office provided guidance for those affected by the breach, including reporting stolen documents, monitoring bank statements and credit reports, staying alert for suspicious communications, and using robust passwords and authentication methods.

UK cyber authorities recommended transitioning from traditional passwords to passkeys as a more secure alternative.