A cyber attack on a provider of check-in and boarding systems triggered widespread disruption at several major European airports on Friday, grounding flights and stranding passengers. London’s Heathrow, the continent’s busiest hub, was among those affected, along with airports in Berlin, Brussels and Dublin.
The problems centred on the MUSE software system developed by Collins Aerospace, a subsidiary of RTX, which supplies passenger processing technology to airlines worldwide. RTX confirmed a “cyber-related disruption” had impacted services at selected airports but did not specify which.
Heathrow said the attack had caused delays and cancellations but stressed safety was not compromised. By midday, aviation data firm Cirium reported 29 cancelled departures and arrivals across Heathrow, Berlin and Brussels. Brussels Airport warned passengers of “delays on most departing flights” and said four aircraft had been diverted. It later asked airlines to cancel half of Saturday’s departures to prevent overcrowding and further disruption.
Berlin Airport reported longer-than-usual check-in queues, while Dublin Airport said the impact there was limited. Frankfurt, Germany’s largest airport, confirmed it was unaffected.
RTX said the issue primarily affected electronic check-in and baggage drop systems, with airlines reverting to manual processes in the interim. The company gave no details about who was behind the attack.
Cybersecurity analysts suggested the disruption could be the result of a ransomware strike or deliberate sabotage. “The incident highlights the fragile and interdependent nature of the digital ecosystem underpinning air travel,” said Rafe Pilling, director of threat intelligence at Sophos. “This year we’ve already seen serious breaches across retail and automotive sectors in the UK. Aviation is equally vulnerable.”
Collins Aerospace was previously linked to ransom-seeking hackers in 2023, according to breach-tracking websites, though the company has not commented on those claims.
Passengers voiced frustration at the lack of information. “I arrived at the airport around 9.15 a.m., and all we’ve been told is that there was a technical fault,” said traveller Kim Reisen at Berlin Airport. “Of course, online you can read it was a cyber attack. We’re just waiting to see what happens.” Another passenger, Siegfried Schwarz, called the incident “incomprehensible” and questioned why stronger defences were not in place.
Airlines responded with varying levels of disruption. EasyJet said it expected no major impact, while Delta Air Lines reported only minor delays thanks to a workaround. United Airlines also cited “minor departure delays” but no cancellations. Ryanair and IAG, the parent company of British Airways and Aer Lingus, did not immediately comment.
The European Commission said there were no signs of a “widespread or severe attack,” though investigations into the origin of the breach are continuing. British and German cyber defence agencies confirmed they were liaising with affected airports.
The disruption comes amid a wave of high-profile cyber incidents, including a breach at Jaguar Land Rover earlier this year that halted production. Analysts warn such attacks are likely to grow in scale and frequency as critical infrastructure becomes increasingly digital.
