Iberia customer data leaked in third-party supplier breach
At Spanish airline Iberia, a breach at a third-party supplier led to the theft of customer names, email addresses and loyalty membership numbers. The company notified customers of the leak, activated its security response procedures and said passwords and banking information were not affected. The Everest ransomware group claimed to have stolen 596GB of data and later demanded $6 million in exchange for not leaking it.
Key facts
- Affected organisation
- Iberia
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Customer names, email addresses and loyalty membership numbers leaked; number of affected customers not disclosed
- Cause / method
- Security breach at a third-party supplier
- Location
- Spain
If your data was exposed
Exposed dataNameEmail
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Iberia disclosed a customer data leak linked to a supplier breach.
- It emerged that customer names, email addresses and loyalty membership numbers had been stolen, and that passwords and banking information were not affected.
- It emerged that Iberia had activated its security response procedures and that the Everest group claimed to have stolen 596GB of data.
- It emerged that the attackers had demanded $6 million in exchange for not leaking passenger data.
11 related reports
- Hundreds of Salesforce customers hit by yet another third-party vendor breach
- Salesforce data once again leaked via third-party application
- Iberia discloses customer data leak after vendor security breach
- Iberia discloses security incident tied to supplier breach
- Iberia tells customers it was hit by a major security breach
- Cybersecurity News: CrowdStrike insider catch, Spanish airline breach, AI not insurable
- Spanish Airline Iberia Notifies Customers of Data Breach
- Iberia airline detects serious data breach and activates security protocol
- Everest ransomware claims breach at Spain’s national airline Iberia with 596 GB data theft
- Iberia Airlines data breach: What customers need to know
- Hackers Are Now Demanding $6 Million From Spain's Iberia Airline To Stop Leaking Passenger Data From Massive Cyber Breach
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.