Iberia Data Breach Highlights Third-Party Tech Risks for Airlines

On November 22, 2025, Iberia, Spain’s largest airline, revealed that it had been hit by a cyberattack targeting one of its third-party technology providers. The breach allowed unauthorized access to the personal data of some customers.

Iberia notified those affected, clarifying that the compromised information includes names, email addresses, phone numbers, and Iberia Club loyalty program details. Importantly, no sensitive financial information, such as complete credit card data or passwords, was exposed.

The breach became public shortly after a threat actor claimed on hacker forums to possess 77 gigabytes of stolen data from Iberia. The leaked package reportedly includes corporate documents, internal communications, and even materials related to aircraft operations and maintenance, which, if validated, may reveal sensitive technical information.

Iberia has stated that it is verifying the authenticity of this data dump while cooperating with the Spanish Data Protection Agency, national cyber authorities, and law enforcement.

Iberia states that it immediately activated its incident response protocols to contain the attack and safeguard its systems. The airline emphasized that its core operational and flight safety systems remained unaffected.

Customers have been advised to watch for phishing attempts or fraudulent messages that may exploit the stolen information.

This breach underscores the escalating cybersecurity risks facing the airline industry and the vulnerabilities in third-party digital platforms.

In October 2025, Vietnam Airlines reported a data breach, revealing that a third-party customer service system had exposed personal information of potentially millions of passengers from November 2020 to June 2025.

Similarly, in June 2025, Qantas disclosed that a cyberattack on a third-party platform used by its contact center may have compromised about 6 million customer records, including contact details and frequent flyer numbers.

Photo by Juan Domenech on Unsplash