Iberia, Spain’s national flag carrier airline, suffered a **third-party data breach** after a threat actor claimed to have exfiltrated **77 GB of its sensitive data**. The incident, reported by *Security Affairs*, suggests the compromise involved external vendor systems, potentially exposing corporate, operational, or customer-related information. While the exact nature of the stolen data (e.g., employee records, flight operations, passenger details) remains undisclosed, the scale (77 GB) indicates a **significant data leak** with possible reputational, financial, and regulatory repercussions. The breach underscores vulnerabilities in supply chain cybersecurity, where third-party vendors serve as attack vectors for targeting high-profile organizations. Iberia has not confirmed whether the stolen data includes **customer personal information** or **internal employee records**, but the volume suggests a high-risk exposure. The incident may trigger investigations under **GDPR** (given Iberia’s EU operations) and could erode customer trust, particularly if financial or identity-related data was compromised.
Source: https://www.scworld.com/brief/over-69k-hit-by-coinbase-breach
Iberia Express cybersecurity rating report: https://www.rankiteo.com/company/iberia-express
"id": "IBE40104140112625",
"linkid": "iberia-express",
"type": "Breach",
"date": "5/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Aviation',
'location': 'Spain',
'name': 'Iberia',
'type': 'Airline'}],
'data_breach': {'data_exfiltration': '77 GB'},
'date_publicly_disclosed': '2025-11-24',
'description': "Iberia, Spain's flag carrier, confirmed being impacted by a "
'third-party breach after a threat actor claimed to have '
'stolen 77 GB of its data.',
'impact': {'data_compromised': '77 GB'},
'references': [{'date_accessed': '2025-11-24', 'source': 'Security Affairs'}],
'title': 'Iberia Third-Party Data Breach (November 2025)',
'type': 'Data Breach (Third-Party)'}