Dear Customer,

The purpose of this communication is to inform you that, unfortunately, Iberia Líneas Aéreas de España (“Iberia”) has detected a security incident related to a non authorized access to the systems of one of Iberia’s service providers, which has compromised the confidentiality of certain data.

Despite the security measures implemented by Iberia, we have found evidence of a non authorized access to certain personal data belonging to some of our customers, among which your information may be included. The current investigation indicates that the following personal data may have been exposed: name and surname, email address, phone number, Passenger Name Record (PNR), and loyalty card identification number (Iberia Club).

Furthermore, we would like to inform you that under no circumstances has your Iberia account login information or passwords been compromised, nor has anyone been able to access your full bank card details, which therefore cannot be used.

As soon as we became aware, we activated our security protocols and procedures and adopted all necessary technical and organizational measures to contain it, mitigate its effects, and prevent it from happening again in the future. These include the implementation of two-factor authentication for (i) managing your bookings through our website, app, and call center, and (ii) changing the email address associated with your Iberia account (a security measure that ensures that whenever you wish to manage your bookings and/or modify the email associated with your Iberia account, a verification email will be sent to confirm that the request is made by you). We are also monitoring our systems to detect any suspicious activity. Likewise, in compliance with applicable regulations, we have notified the competent authority. The investigation remains ongoing both internally and with our providers.

As of the date of this communication, we have no evidence that any fraudulent use of this data has occurred. In any case, we recommend that you pay attention to any suspicious communications you may receive, in order to avoid any inconvenience that such communications may cause you. We recommend that you report any anomalies or suspicions you detect to our call center by calling the following telephone number: +34 91 3336701

We apologize for any inconvenience this situation may cause you. We would like to reaffirm our commitment to security and compliance with data protection regulations. Should you have any questions regarding this matter, please contact our Data Protection Officer at the following email address: [email protected]. If we obtain any additional information on this matter, we will contact you as soon as possible.

Sincerely, Iberia