Iberia, Spain’s national flag carrier airline, suffered a **third-party data breach** after a threat actor claimed to have exfiltrated **77 GB of its sensitive data**. The incident, reported by *Security Affairs*, suggests the compromise involved external vendor systems, though the exact nature of the stolen data (e.g., customer records, operational details, or employee information) was not explicitly disclosed. The breach poses significant risks, including potential exposure of **personal or corporate data**, financial fraud, or reputational damage, especially given Iberia’s role as a major airline with access to passenger information, flight operations, and partner networks. The scale of the stolen data (77 GB) indicates a **large-scale intrusion**, likely targeting high-value assets. While no ransomware was mentioned, the theft of such a substantial volume of data aligns with cybercriminal motives for **espionage, resale on dark web markets, or leverage in future attacks**. The incident underscores vulnerabilities in third-party supply chains, a growing attack vector for airlines and critical infrastructure providers.
Source: https://www.scworld.com/brief/separate-ransomware-attacks-purportedly-hit-coca-cola-bottling-partner
Iberia Express cybersecurity rating report: https://www.rankiteo.com/company/iberia-express
"id": "IBE38105638112625",
"linkid": "iberia-express",
"type": "Breach",
"date": "5/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Aviation',
'location': 'Spain',
'name': 'Iberia',
'type': 'Airline'}],
'data_breach': {'data_exfiltration': '77 GB'},
'date_publicly_disclosed': '2025-11-24',
'description': "Iberia, Spain's flag carrier, confirmed being impacted by a "
'third-party breach after a threat actor claimed to have '
'stolen 77 GB of its data.',
'impact': {'data_compromised': '77 GB'},
'references': [{'date_accessed': '2025-11-24', 'source': 'Security Affairs'}],
'title': 'Iberia Third-Party Data Breach (November 2025)',
'type': 'Data Breach (Third-Party)'}