{"id":123079,"date":"2025-12-01T14:34:00","date_gmt":"2025-12-01T09:04:00","guid":{"rendered":"https:\/\/aviationa2z.com\/?p=123079"},"modified":"2025-12-01T01:13:49","modified_gmt":"2025-11-30T19:43:49","slug":"iberia-faces-6-million-ransom-after-cyberattack","status":"publish","type":"post","link":"https:\/\/aviationa2z.com\/index.php\/2025\/12\/01\/iberia-faces-6-million-ransom-after-cyberattack\/","title":{"rendered":"Iberia Faces $6 Million Ransom After Passenger Data Stolen in Cyberattack"},"content":{"rendered":"\n

MADRID-<\/strong> The Everest ransomware group has breached Iberia Airlines (IB)<\/a>, Spain\u2019s flag carrier headquartered at Adolfo Su\u00e1rez Madrid\u2013Barajas Airport (MAD).<\/p>\n\n\n\n

Hackers demand $6 million ransom to stop leaking 596 GB of stolen Iberia passenger data that includes names, emails, birthdates, masked credit card details, and booking records.<\/p>\n\n\n\n

News of the breach surfaced last Sunday when Iberia began emailing Iberia Club members that personal details may have been stolen.<\/p>\n\n\n\n

The same Russian-linked Everest group previously disrupted check-in systems at major European airports in September.<\/p>\n\n\n\n

\"Iberia
Photo: Cl\u00e9ment Alloing<\/figcaption><\/figure>\n\n\n\n

Iberia Faces $6 Million Ransom Demand<\/h2>\n\n\n\n

According to PYOK<\/a>, the Everest group gained access through a third-party vendor and extracted 596 GB of data, including 430 GB of which are email files containing over 5 million editable records.<\/p>\n\n\n\n

On the dark web, a member linked to Everest posted: \u201cA full data leak would have catastrophic consequences for both customers and the company, triggering a massive wave of spam and fraud.\u201d<\/p>\n\n\n\n

The criminals threaten to publish or sell the database unless Iberia pays $6 million. While full credit card numbers were not compromised, the stolen masked card data, combined with birthdates and travel histories, enables highly convincing phishing campaigns.<\/p>\n\n\n\n

Data Confirmed Stolen from Iberia<\/h4>\n\n\n\n

Iberia (IB) confirmed the breach affects frequent flyer accounts and includes:<\/p>\n\n\n\n