Everest ransomware claims breach at Spain’s national airline Iberia with 596 GB data theft

Everest claims large breaches at Iberia and Air Miles España with major data taken from both travel platforms placing millions of users at risk.

Everest ransomware group has published a claim saying it breached Iberia, Spain’s flag-carrier airline and extracted a 596 GB database along with 430 GB of booking-related mail files. The group states that the data covers millions of customers in multiple countries.

As seen by Hackread.com on the group’s dark web leak site, the group claims the stolen data includes full identity information, loyalty details, Avios balances, travel histories, ticket numbers, booking structures, message content and payment records from IberiaPay.

Everest also says it had long-term access with the ability to read and alter bookings. They outline actions such as changing contact details, adjusting emergency contacts, modifying seats, meals, and other add-ons, and viewing or cancelling tickets within fare rules.

The group says it ...