Ransom! Iberia

The ransomware targeted Iberia, the Spanish flag carrier airline, in an attack orchestrated by the threat actor Everest, potentially compromising sensitive airline data and operations. The incident has impacted Spain.

Incident Details

  • Victim: Iberia
  • Country: ES
  • Actor: everest
  • Source: http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/news/Iberia/
  • Discovered: 2025-11-25 16:14:28.251904
  • Published: 2025-11-25 16:14:08.664329

Information

  • Iberia is the flag carrier airline of Spain.
  • Founded in 1927 and headquartered in Madrid, Spain.
  • Operates an international network of services from Madrid-Barajas Airport.
  • Member of the Oneworld airline alliance.

Disclaimer: This post is based on public claims made by the ransomware group "everest". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live