Iberdrola Suffers Cyber Attack, Exposing Data of Over 650,000 Customers in Spain

Iberdrola, Spain's largest electricity company, has confirmed a cyber attack that compromised the personal information of over 650,000 customers. The breach, which occurred between May 5 and 7, exposed names, surnames, and ID numbers, but the company maintains that sensitive financial data remained secure.

The attack was carried out through a supplier, and Iberdrola has notified all affected customers via email. The company's IT department claims to have promptly addressed the breach and emphasised its ongoing efforts to combat cyber threats.

This incident marks the third major cyber attack on a Spanish multinational this month, following similar breaches at Banco Santander and Telefónica. The National Cybersecurity Institute (Incibe) recommends using web tools like Have i Been Pwned to check for potential exposure.

This is not the first time Iberdrola has faced a cyberattack. In early 2022, the company experienced a larger breach affecting 1.3 million customers, where additional personal details like phone numbers and email addresses were leaked. The Spanish Data Protection Agency imposed fines on Iberdrola for security lapses related to that incident.