When an airline as large as Iberia admits to a data breach, the immediate reaction is usually: what went wrong? But perhaps the more important question is no longer that, but rather: what will we do to ensure that when quantum computing arrives, we are not exposed irreversibly?
The recent incident that hit Iberia, caused by a compromised third-party provider, exposed names, emails, phone numbers, and frequent flyer numbers of millions of customers. The company assured that no passwords or banking data were compromised, and so far, there’s no evidence of fraud. But looking deeper, the real issue is even more troubling: we’ve built massive digital identity repositories that never expire — and these could be permanently at risk once quantum computers become capable of breaking today’s encryption.
At TecnetOne, here’s why we believe this incident is more than just another leak.
When thinking about data breaches, we usually picture stolen credit cards. But those expire. They can be replaced or blocked.
What airlines store, on the other hand, doesn’t expire:
If someone accesses these databases, they obtain a full portrait of how you travel, where you go, and how often — even how you spend. Now imagine this data being exfiltrated today and decrypted 10 years from now thanks to quantum computing. That’s the scenario that experts are already preparing for.
Quantum computers might not be able to break modern encryption yet, but that doesn’t mean attackers are sitting idle.
There’s already a known tactic called Harvest Now, Decrypt Later, which follows this logic:
This makes every data breach today a potential time bomb.
And when we talk about airlines or critical infrastructure, we’re talking about millions of travelers, officials, businesspeople, diplomats — all exposed through their digital footprints.
Read more: Iberia Suffers Data Breach After Vendor Hack: What You Need to Know
Many countries are already transitioning to post-quantum cryptography — algorithms designed to resist quantum attacks. But the reality is bleak:
If you haven’t started planning for this, now is the time. Many of today’s secure technologies will be obsolete in the near future.
Transitioning to quantum-safe cryptography isn’t just swapping out certs or patching systems. It requires strategic leadership decisions:
Until recently, the risk felt too distant. But today, quantum threats have a real timeline. Ignoring them will only make the transition slower, costlier — and possibly too late.
You might also be interested in: Aeroméxico Suffers Alleged Cyberattack: 30 Million Records at Risk
Airlines like Iberia are essential operators. They manage:
This makes them prime targets for cybercriminals and nation-state actors.
South Korea, European countries, the U.S., and Japan report increasing attacks on airlines and airports each year.
In Spain alone, attacks on essential operators rose 43% in 2024. And the trend continues.
When a sector manages data this valuable and long-lasting, a breach isn’t just a company issue — it becomes a national security risk.
If you work in IT, security, or data management, these are the urgent questions you need to ask:
This is no longer a future problem. It’s a present challenge. And ignoring it only increases the risk.
The Iberia case should be a wake-up call: even the most advanced companies can suffer breaches exposing millions of personal records.
But in the quantum era, the question isn’t “what happened?” — it’s “what will we do before it’s too late?”
At TecnetOne, we see it clearly: transitioning to post-quantum cryptography is a technical, strategic, and human challenge.
Those who start now will have a huge advantage over those who wait.
Your data, your clients’ data, your company’s reputation — these must be protected not just today, but 10 years from now.
The quantum threat won’t wait. And the time to act is slipping away.