Stolen data experts at HaveIBeenPwned have analysed the published data and confirmed that it contains people’s email addresses, phone numbers, addresses, licence plate numbers, purchasing history and browsing device data.
Cyber-security expert Kevin Beaumont warned those affected to be on high alert for other forms of scam and hack – especially high profile or wealthy individuals.
“The data includes both historical locations and planned future travel, so individuals sensitive to their movements being known may need to take precautions,” he said.
“People should be alert to scammers reusing the data and so knowing details such as phone numbers and car registration numbers,” he added.
“Our advice to affected customers remains to be vigilant for unsolicited emails, text messages and phone calls,” MAG said in its statement.
“We would like to reassure customers that Manchester Airport Group takes the security of customer information extremely seriously and we apologise for any inconvenience or concern caused.”
At no point was passengers’ physical safety at risk in the airports, the company said after the breach.
Unusually, the cyber criminals’ website where the MAG data is available is hosted on the clear internet and not on the dark net like most other so-called hacker “leak sites”.
This makes the data easier to access, increasing the risk to victims of MAG and the other companies the gang has breached in recent months.
As well as posting the stolen data, the hackers boasted about how they breached each victim using the same method each time – exploiting weaknesses in how companies store their digital keys for internal networks.
About The Author
