A threat actor is claiming to have breached Iberia, S.A. (Iberia), Spain’s flag carrier airline and a subsidiary of the International Airlines Group (IAG). The actor is offering a 77 GB database for sale, allegedly extracted from the airline’s internal servers.
According to the actor, the 77 GB of allegedly compromised data is highly sensitive and includes:
-
Confidential aircraft maintenance programs (AMP) for A320/A321 models, covering 2011 to 2025.
-
Airbus ACDATA system database dumps (CSVs, PDFs).
-
Aircraft configurations and technical documents.
-
The official Air Operator Certificate (AOC) for Iberia Express.
-
Detailed records for life-limited parts (LLP), structural inspections (SSI), and engine models.
-
Internal digital signatures and approval documents.
-
Aircraft component mappings (AMM/TSM) and technical schematics.
-
XML fragments containing part numbers (PNR/MFR).
