Cyberattack Halts European Airports, Trapping Thousands

Major European Airports Suffer from Cyberattack Disruptions

Major European airports, including London Heathrow, Berlin Brandenburg, and Brussels Airport, experienced significant disruptions on the 20th after a cyberattack targeted systems operated by Collins Aerospace. This U.S.-based aerospace and defense company provides critical boarding and baggage handling systems to airports around the world. The attack led to hundreds of flight cancellations and delays, stranding tens of thousands of passengers and causing widespread disruption to air travel across the continent.

London Heathrow, Europe’s busiest international airport with over 130,000 daily passengers, saw its check-in and automated baggage systems fail from the morning. Passengers were forced to queue at manually operated counters, leading to cascading delays. Reports indicated that “delay” alerts flashed across airport screens, with thousands missing their flights. Similar issues were reported at Brussels Airport, where check-in, ticketing, and boarding automation failures forced manual procedures. By afternoon, ten flights had been canceled, and all flights were delayed by an average of over an hour. Despite emergency staffing, long queues persisted due to limited resources.

Berlin Brandenburg Airport also reported extended wait times, citing “problems with the service provider.” Dublin and Cork airports in Ireland similarly required manual check-ins for some carriers. Flight data firm Cirium confirmed 29 canceled flights between Heathrow, Berlin, and Brussels, while FlightAware noted “hundreds of delays.” The outage was traced back to an attack on Collins Aerospace’s Muse (MUSE·Multi-User System Environment) platform, which supports boarding, electronic check-in, and baggage handling for hundreds of global airports. Heathrow and other European hubs rely directly or indirectly on this system.

Collins Aerospace acknowledged “disruptions due to a cyber incident” but did not provide details on the attacker or the method used. Security analysts have noted that ransomware attacks on U.S. and European infrastructure are not uncommon, but this incident may reflect geopolitical motives amid heightened tensions. Experts suggested that although unproven, the attack appears less like an IT glitch and more like a coordinated cyber operation—potentially linked to Russia.

The European Union, which has tightened cybersecurity regulations in response to fears of Russian and Chinese threats, faced criticism for failing to address vulnerabilities in foreign supply chains. The Financial Times warned that aviation is the EU’s economic lifeline and that this incident proves cyberattacks can destabilize the entire continent. The European airline association (A4E) urged immediate collaboration between carriers, governments, and the EU to “overhaul cybersecurity standards.”

Impact on Travelers and Aviation Industry

Korean travelers en route to Europe also experienced major inconveniences due to the disruptions. With flights canceled or delayed, many passengers found themselves stranded or forced to rebook their journeys. The situation highlighted the interconnected nature of global air travel and the potential for a single cyberattack to have far-reaching consequences.

The incident has sparked discussions about the need for stronger cybersecurity measures in the aviation sector. As airports become increasingly reliant on digital systems, the risk of cyber threats grows. The attack on Collins Aerospace underscores the importance of securing not only internal systems but also third-party providers that play a crucial role in airport operations.

Ongoing Investigations and Future Concerns

While the exact source of the cyberattack remains unclear, the possibility of Russian involvement has raised concerns among cybersecurity experts. The timing of the attack, coinciding with heightened geopolitical tensions, has led to speculation about its motivations. However, no definitive evidence has been presented to confirm these suspicions.

In response to the incident, various stakeholders in the aviation industry are calling for increased cooperation and investment in cybersecurity. The European Union has been urged to take a more proactive approach in addressing vulnerabilities within its infrastructure. This includes strengthening regulations for foreign suppliers and ensuring that all parties involved in airport operations maintain high standards of security.

As the aviation sector continues to recover from the disruptions, the focus will likely shift towards implementing more robust cybersecurity protocols. The incident serves as a stark reminder of the potential consequences of cyber threats and the need for vigilance in protecting critical infrastructure. With air travel playing a vital role in global connectivity, ensuring the security of airport systems is more important than ever.