Spanish airline Iberia attributes recent data breach claims to November incident

Researchers say a threat actor called Zestix auctioned roughly 77 GB of data allegedly stolen from Iberia via an infostealer infection that yielded credentials to the airline’s ShareFile instance. Stolen material reportedly includes technical and maintenance documents for A320/A321 aircraft plus some customer personal data; Iberia says the incident was reported to regulators, breach notices were sent, two-factor authentication was enabled for affected accounts, and flight safety was not compromised. Hudson Rock characterizes Zestix as an initial access broker operating in Russian-language forums and notes possible links to other cybercriminal groups.