A cyberattack on Collins Aerospace’s passenger processing system triggered delays and cancellations at major European airports, including Heathrow and Berlin. The outage highlights the industry’s reliance on a few critical technology suppliers and the fragile digital backbone of global air travel.
Manual Processing Strains Airport Operations
The incident began late on September 19, when Collins Aerospace’s Multi-Use System Environment (MUSE), a platform that powers check-in, boarding, and baggage handling, was knocked offline by what the company confirmed as a “cyber-related disruption.” The outage forced airports including London Heathrow, Berlin Brandenburg, and Brussels to revert to manual processing. Kiosks, baggage drops, and automated boarding systems were unusable, creating long queues and delaying departures.
Airlines have kept flights moving by assigning additional staff to counters, but operations slowed significantly. According to Cirium data, 29 flights were canceled on September 20 across the three airports, nearly half of them at Heathrow. The number is modest compared to the hundreds of daily services at these hubs, yet the disruption underscored how even limited outages can ripple across schedules when aircraft utilization is tightly managed.
Aviation’s Digital Dependence Under Pressure
The cyberattack highlights the growing risk concentration around a handful of aviation technology suppliers. Collins Aerospace, part of RTX Corporation, provides digital platforms to dozens of airlines and airports worldwide. A failure at this level effectively becomes systemic, raising questions about resilience and redundancy in critical aviation IT.
Cybersecurity specialists noted the lack of clarity around who is responsible for the attack. “Details are currently scarce concerning the nature of the attack, but the impact underscores the fragile and interdependent nature of the digital ecosystem underpinning air travel,” said Rafe Pilling, director of threat intelligence at Sophos, in an official statement. The European Union Aviation Safety Agency has in recent years flagged cyber resilience as one of the most pressing risks facing the sector, alongside climate disruption and geopolitical instability.
The Unseen Cost of Recovery
While cancellations remain limited, the broader cost for airlines is likely to extend beyond lost flights. Extra staffing, customer compensation, and reputational damage all weigh on carriers already managing thin margins. Recent reports show that cyber incidents across aviation have been rising steadily, with the European Union Agency for Cybersecurity tracking hundreds of attempted intrusions on transport infrastructure in the past two years.
Digital outages can be just as damaging as storms or strikes. The challenge is to build layered defenses and fail-safes robust enough to keep isolated software failures from cascading into continent-wide disruption.
