Everest Ransomware Group Breaches Iberia and Air Miles España

Scworld

Everest Ransomware Group Breaches Iberia and Air Miles España

First seen 2 Dec 2025, 18:33 UTC • •34.8

Article Content

1 / 4

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

The Everest ransomware group has claimed responsibility for a significant breach affecting Iberia, Spain's national airline, and Air Miles España, the operator of a travel rewards program. They have stolen 596 GB of data, including personal and payment information of millions of customers, and gained the ability to manipulate bookings, compromising passenger data security.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 218d ago How this analysis works

More articles in this cluster (3)

Threat Graph

11 entities, 18 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (5)

Data Breach
DDoS
Malware
Ransomware
T1566 - Phishing

Organization (4)

Air Miles España
Iberia
Petrobras
Under Armour

Threat Actor (2)

Everest
Everest Ransomware Group

Relationships

Everest uses Data Breach
Everest uses DDoS
Everest uses Malware
Everest uses Ransomware
Everest uses T1566 - Phishing
Everest Ransomware Group uses Data Breach
Everest Ransomware Group uses DDoS
Everest Ransomware Group uses Malware
Everest Ransomware Group uses Ransomware
Everest Ransomware Group uses T1566 - Phishing
Everest targets Air Miles España
Everest targets Iberia
Everest targets Petrobras
Everest targets Under Armour
Everest Ransomware Group targets Air Miles España
Everest Ransomware Group targets Iberia
Everest Ransomware Group targets Petrobras
Everest Ransomware Group targets Under Armour

Following this threat?

Track Everest and Air Miles España in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

FlyDubai Ransomware Attack Exposes Sensitive Data and Boeing Code The Everest ransomware gang claims to have exfiltrated 4.36GB of data from FlyDubai, including personal records of 2,862 employees and Boeing proprietary source code. The stolen data reportedly includes pilot training materials and operational directives, with some files marked as 'Boeing Proprietary, Confidential…

Asus eShop Data Breach Exposes Customer Order Information Asus has confirmed a data breach affecting its online store, where unauthorized access to customer order information occurred. The breach, disclosed via email to customers, revealed that details such as names and order records may have been accessed, although no financial information was compromised. Asus stated that…