InfoSecBulletin Cybersecurity for mankind
3 airports in the UK were affected by a “cyber security incident.” Hackers got into data belonging to nearly nine million people and asked for ransom. Manchester Airports Group (MAG), which operates Manchester, East Midlands, and London Stansted airports, reported that hackers stole customers’ contact information, vehicle registrations, and postcodes over the weekend.
MAG told the BBC the hackers demanded a ransom fee for the return of the data, which the group said it refused to pay. The sum of the ransom fee was not disclosed.
Hackers Exploit Fortinet Flaws to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls
Hacker stole Meta GitHub repos; Stole Source Code
Urgent patch! Zoom,NVIDIA and IBM Patch 41 Security flaws
Microsoft patches record braking 1411 flaws; 2 zero days
Anthropic unveils “OSS Scanner” Free AI Vulnerability Scanner for Open-Source Projects
Rise on RCE Exploits Targeting Hikvision Camera Flaw
FortiBleed Attack Compromised 80,000+ Devices, SonicWall Patches 4 SMA1000 Flaws CVSS 10
Critical Atlassian & IBM Flaws Expose Files and Enable Remote Code Execution
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
The firm said “at no point has passenger safety or aviation security been compromised” and the system hacked did not hold customers’ bank or payment details. The data of about 8.7 million customers was accessed.
Most of the data accessed was limited to customer email addresses and connected to WiFi sign-ups at the airport terminals, MAG said.
MAG said in a statement: “We would like to reassure customers that Manchester Airport Group takes the security of customer information extremely seriously and we apologise for any inconvenience or concern caused.”
“We immediately contained the risk and have been working with specialist advisors and taking appropriate steps to protect our customers and systems,” MAG said.
“We have informed and are working with the relevant authorities.”
More detailed data, including car registrations, came from people who booked parking spots, arranged lounge access, and reserved fast-track services.
The identity of the hackers was known, MAG said, and the relevant authorities had been informed. The Information Commissioner’s Office said it was assessing the incident.
“We can confirm we have received a breach report from Manchester Airports Group, and we are assessing the information provided,” a spokesperson said.
Related News:
Indonesia’s National data center compromised, $8M ransom demand
Indian Major Airports faced GPS Spoofing: Gov.t Confirmed; Tightens Security
Hacker Claim to compromise over 15 Asian telecom
