Iberia has begun notifying customers after confirming it experienced a cybersecurity incident involving unauthorised access to systems operated by one of its third-party suppliers.
According to details contained in a customer email seen by this publication, the airline said the incident may have exposed limited personal information, including names and email addresses. It added that no account credentials, passwords or full payment card details were affected, and that its internal investigation remains ongoing in co-operation with the supplier involved.
Iberia told customers it activated established security protocols as soon as the situation was identified and introduced extra safeguards, including verification codes for any attempt to change the email associated with an account, along with enhanced monitoring for suspicious activity.
The airline said it has not identified any fraudulent use of the data and advised customers to remain attentive to unusual or unsolicited communications. It also encouraged anyone with concerns to contact its call center at +34 900111500.
Jon Abbott, Co-founder and CEO of ThreatAware, said: “With the holiday season approaching, many airlines are operating at high demand and full capacity, and cybercriminals are ready to strike. The aviation industry must be prepared, and that starts with having strong security fundamentals in place. The only way to address this is through strong cyber hygiene and robust user validation.
“Airline supply chains are often extensive and critical to day-to-day operations. As a result, attackers frequently target third-party providers, particularly when their customers are well-known names and store customer information. Following suspected third-party breaches, clear procedures should be in place to disable integrations, change shared passwords and verify access.
“Customers of Iberia Airlines should remain cautious of phishing attempts or unsolicited communications. Whilst there may not be any evidence at present, as Christmas approaches, criminals are likely to exploit people who are eager to book flights home or reconnect with family.”
