Iberia sufre un ciberataque, ha sido hackeada con robo de datos

Iberia sufre un ciberataque, ha sido hackeada con robo de datos

Iberia acknowledges an unauthorized external access to a client communication repository, compromising limited personal data such as names, emails, and loyalty account numbers, but firmly states that no payment details were stolen and flight safety remains uncompromised. This incident highlights the critical vulnerability inherent in relying on third-party managed repositories, emphasizing that data exposure often stems from supply chain weaknesses rather than direct infrastructure breaches. Concurrently, unverified claims circulate regarding the sale of massive internal datasets, including technical aviation documents, on the dark web for industrial espionage. While Iberia has not confirmed this broader leak, the situation underscores the complex ecosystem of open and shared data within the aviation industry, where sensitive operational information can potentially be aggregated and misused by malicious actors seeking competitive advantages or intellectual property theft. In response, the airline has implemented double-factor authentication and issued apologies, urging clients to monitor communications for fraud. This episode is highly relevant to open data discussions as it illustrates the tension between data accessibility through external services and the imperative for robust security. It serves as a cautionary tale for organizations managing public-facing data, demonstrating that even limited data leaks can erode trust and necessitate immediate, comprehensive protective measures to safeguard user privacy and operational integrity.

Source: es.euronews.com
Published on 2025-11-24