AI Summary

Security researcher Scott Helme says his analysis backs FulcrumSec’s claim that Manchester Airports Group left privileged API keys in client‑side JavaScript, exposing the credentials for four years. The over‑privileged keys, tied to the Iterable service, could have allowed access to 8.8 million customer records and potentially enabled mass deletion.

AI summaries can be wrong sometimes—always verify important details using the source article.