By 
Iberia has notified customers of a data breach caused by unauthorized access to a third-party supplier’s systems. The airline confirmed that customer names, email addresses, and Iberia Club loyalty IDs were exposed, but emphasized that no passwords, account access, or financial data were compromised.
In its notification, Iberia said it immediately activated security protocols, strengthened system monitoring, and coordinated with the affected supplier and relevant regulators. The company says it has no evidence of fraudulent use of the leaked data but urges customers to remain vigilant for suspicious messages.
The disclosure comes as a threat actor claims to be selling 77GB of Iberia’s internal data—allegedly including technical documents for A320/A321 aircraft, maintenance files, engine data, and signed internal records—for $150,000. The hacker asserts the material includes ISO 27001 and ITAR-classified files.
