Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal
Summary
The hacker group ALPHV/BlackCat has leaked approximately 550GB of data belonging to the Manchester Airports Group (MAG) after MAG reportedly refused to pay a ransom. The group claims to have gained initial access by exploiting exposed administrator keys.
IFF Assessment
FOE
The leak of sensitive data and the successful exfiltration by a hacker group represent a significant loss for the affected organization and a win for attackers.
Defender Context
This incident highlights the critical importance of robust access management and key hygiene, as exposed admin keys can lead to massive data breaches. Defenders should prioritize monitoring for and remediating exposed credentials, especially in cloud environments, and ensure strict access controls are in place.