When you purchase through links on our site, we may earn an affiliate commission. This doesn’t affect our editorial independence.
The Everest ransomware group claims to have breached Iberia, Spain’s national carrier’s systems, stolen nearly 600GB of confidential data. The assailants are now demanding a hefty $6 million ransom.
The Everest ransomware group claims to have breached Iberia’s internal systems, stealing nearly 600GB of sensitive data and presenting a $6 million ransom request to the Spanish airline.
In a notification regarding a data security incident sent to affected customers last week, Iberia stated that it had recently detected a security breach. The breach affected one of its service providers and led to the leak of sensitive personal information of its customers.
An inquiry uncovered that the breached data comprised complete names, email addresses, Iberia Club loyalty card IDs, and additional personal information. The airline stated that no customer account access details, passwords, or complete bank card information were compromised in the incident.
Iberia disclosed details about the security incident approximately one week after another group claimed to have pilfered 77 gigabytes of data from the airline’s systems. The hacker claimed that the stash was “obtained directly from the airline’s internal servers” and contained technical document like maintenance files, engine information, and other sensitive records. The malicious actor also mentioned their readiness to sell the complete stolen database for $150,000.
See Other Posts on this Site
Everest Demands a Hefty $6 Million Ransom
The Everest ransomware group announced it had infiltrated Iberia’s internal systems and taken 596 GB of data, which includes 430 GB of .eml files containing over 5 million records. The breached information reportedly includes names, contact information, birthdates, travel and reservation details, masked credit card details, and marketing profiles.
The hacking group is demanding a $6 million ransom from the airline and has threatened to release the stolen data if the payment isn’t forthcoming.
Iberia has not provided any comments regarding Everest’s allegations. It remains uncertain whether the two events are related or if the airline has indeed faced two different security breaches.
