Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports

2026-08-28T08:51:37Z8bbf0de0f2d38041377552740bdf984a7d8b6ff26483b785004f86dbcf3a3f5f
CVE-2026-60004APTCISAChina-linked threat actorDark CaracalEthereum C2FBIICSKEVPLCSCADATeamPCPactive exploitationaviationcredential theftcritical infrastructurecybercrimedata breachidentity datainfluence operationmalwarestate-sponsored activitysupply-chain attackwater utilities

What happened

Security news feed covering major cyber incidents and advisories, including an 8.7-million-customer breach at UK airport operator MAG, Dark Caracal espionage activity using GoCaracal and Ethereum-based C2 fallback, a TeamPCP open-source supply-chain credential theft operation, attacks against exposed water-sector PLCs, critical-infrastructure compromises, China-linked hacking platforms seized by the FBI, and the actively exploited CVE-2026-60004. The highest-risk items concern critical infrastructure exposure, state-linked intrusion activity, supply-chain credential theft, and exploitation of

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
8bbf0de0f2d38041377552740bdf984a7d8b6ff26483b785004f86dbcf3a3f5f
Enrichment time
2026-08-28T08:51:37Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports · Baitaphish