The ransomware claim alleges that the threat actor Everest targeted Iberia Airlines, the national flag carrier of Spain, disrupting its international operations. The incident has highlighted vulnerabilities in the airlineβs cybersecurity infrastructure, impacting Spain.#Spain
Incident Details
- Victim: Iberia Airlines
- Country: ES
- Actor: everest
- Source: http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/news/Iberia/
- Discovered: 2025-11-25 18:23:58.341163
- Published: 2025-11-25 18:23:40.052654
Information
- Iberia Airlines is the largest and national flag carrier airline of Spain.
- Founded in June 1927.
- Operates an international network of services from its main base in Madrid.
- Part of the International Airlines Group (IAG), alongside British Airways and Aer Lingus.
- Fleet includes various Airbus models.

Disclaimer: This post is based on public claims made by the ransomware group "everest". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.