Iberia Airlines Notifies Customers of Supply Chain Data Breach

Iberia Airlines notified customers that a supplier suffered unauthorized access that may have exposed passenger personal data (names, email addresses, loyalty card IDs); a threat actor reportedly offered a 77GB trove of passenger and technical material for sale. The airline reports no evidence of stolen logins or financial data, has implemented containment measures and enhanced account verification, and cautions customers about phishing while authorities investigate.