[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fj9_qb2yNCAFAr2Hqx0ll8otzL1aLEAEsRmJA2UkmKaI":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":19,"created_at":20,"published_at":21,"article":22,"tags":26,"podcasts":39},"68f88aaf-0618-48f6-a4e3-9e009224e4ec","major-utility-database-breach-exposes-7-million-customer-records","b517be1b-90be-4959-b69b-d1cd403622d4","Major Utility Database Breach Exposes 7 Million Customer Records","A threat actor claims to possess 110GB of sensitive customer data from Iberdrola, including financial details, personal identifiers, and billing information of 7 million customers. This incident highlights critical failures in data protection controls and access management for sensitive customer information. The breadth of exposed data - from bank account numbers to customer photos - indicates insufficient data classification and protection measures. Such breaches can lead to widespread identity theft, financial fraud, and severe regulatory penalties under data protection laws.","**Immediate actions:**\n- Conduct comprehensive audit of all databases containing customer PII to identify exposure risks\n- Implement database activity monitoring to detect unauthorized access attempts\n- Review and restrict administrative access to sensitive customer databases\n\n**Long-term improvements:**\n- Deploy data loss prevention (DLP) solutions to monitor and block unauthorized data transfers\n- Implement database encryption at rest and in transit for all customer information\n- Establish data classification policies with appropriate access controls based on sensitivity levels\n\n**Detection measures:**\n- Enable real-time alerts for bulk data access or unusual database query patterns\n- Implement user behavior analytics to identify anomalous access to customer records",[12,13,14,15,16,17,18],"CIS Control 3","CIS Control 6","NIST PR.DS-1","NIST PR.AC-4","GDPR Article 32","GDPR Article 25","ISO 27001 A.18.1.4","published","2026-06-02T16:07:45.401073+00:00","2026-06-02T16:07:45.306+00:00",{"id":7,"url":23,"slug":24,"title":25},"https:\u002F\u002Fdarkwebinformer.com\u002Fthreat-actor-claims-to-sell-a-110-gb-iberdrola-customer-database-affecting-7-million-customers\u002F","threat-actor-claims-to-sell-a-110-gb-iberdrola-customer-database-affecting-7-mil-fabee0","Threat Actor Claims to Sell a 110 GB Iberdrola Customer Database Affecting 7 Million Customers",[27,33],{"id":28,"name":29,"slug":30,"description":31,"color":32},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":34,"name":35,"slug":36,"description":37,"color":38},"c8b843a5-d5a7-41d1-8d3b-cabded09d2ef","Data Protection","data-protection","Unencrypted data, missing DLP, poor classification","#3b82f6",[]]