-
It seems that Iberia has suffered a hack.
Iberia Airlines has detected a security incident related to unauthorized access to the systems of an Iberia supplier
Just seen this posted on the Iberia forum at Flyertalk. Seems some people have received the following email:
Dear Customer,
The purpose of this communication is to inform you that, unfortunately, Iberia Líneas Aéreas de España (“Iberia”) has detected a security incident related to a non authorized access to the systems of one of Iberia’s service providers, which has compromised the confidentiality of certain data.
Despite the security measures implemented by Iberia, we have found evidence of a non authorized access to certain personal data belonging to some of our customers, among which your information may be included. The current investigation indicates that the following personal data may have been exposed: name and surname, email address, phone number, Passenger Name Record (PNR), and loyalty card identification number (Iberia Club).
Furthermore, we would like to inform you that under no circumstances has your Iberia account login information or passwords been compromised, nor has anyone been able to access your full bank card details, which therefore cannot be used.
As soon as we became aware, we activated our security protocols and procedures and adopted all necessary technical and organizational measures to contain it, mitigate its effects, and prevent it from happening again in the future. These include the implementation of two-factor authentication for (i) managing your bookings through our website, app, and call center, and (ii) changing the email address associated with your Iberia account (a security measure that ensures that whenever you wish to manage your bookings and/or modify the email associated with your Iberia account, a verification email will be sent to confirm that the request is made by you). We are also monitoring our systems to detect any suspicious activity. Likewise, in compliance with applicable regulations, we have notified the competent authority. The investigation remains ongoing both internally and with our providers.
As of the date of this communication, we have no evidence that any fraudulent use of this data has occurred. In any case, we recommend that you pay attention to any suspicious communications you may receive, in order to avoid any inconvenience that such communications may cause you. We recommend that you report any anomalies or suspicions you detect to our call center by calling the following telephone number: +34 91 3336701
We apologize for any inconvenience this situation may cause you. We would like to reaffirm our commitment to security and compliance with data protection regulations. Should you have any questions regarding this matter, please contact our Data Protection Officer at the following email address: oficinaDPO@iberia.es. If we obtain any additional information on this matter, we will contact you as soon as possible.
Sincerely, Iberia
https://www.flyertalk.com/forum/iberia-iberia-club/2207780-ib-club-data-leak.html
I had the misfortune of having to email that oficinaDPO@iberia.es address a couple of years ago with a very basic data request.
After no response (and general incompetence when I did receive a response), I ended up having to email a random Iberia director whose details I found on the internet, and who didn’t work anywhere near the data team, after which, miraculously, my data issue was fixed within four days.
I am not holding out much hope in the event of more complex data requests being sent to the said mailbox.
Interesting. As yet, I haven’t received the email and have the return flights of my 241 back to LHR from South America coming up soon. Fingers crossed not many people have been affected. However I found IB Club next to useless earlier this year. I couldn’t access my account. When I spoke to them and gave them all my details, they said my account didn’t exist! I said it did and had flights already booked. They rechecked and told me as I didn’t have an account I needed to open one. Needless to say, when I keyed in all relevant info to open an account, it said I already had one – and you can only have one IB account. It took over 3 months for them to sort out the mess with lots of toing and froing. Have no idea what the issue(s) were. The only positive of the whole episode was that I never had to hold on too long for someone to pick up the phone!
- You must be logged in to reply to this topic.
