On September 20, 2025, several major European airports faced widespread disruption after a cyberattack on the check-in and boarding systems provided by Collins Aerospace, a subsidiary of RTX. The attack led to flight delays, cancellations, and chaos for thousands of passengers traveling through London’s Heathrow, Brussels, Berlin, Dublin, and Cork airports.
What began as a localized technical glitch quickly escalated into an incident that underscored the fragility of digital infrastructure in global air travel.
What Triggered the Disruption
At the heart of the issue was MUSE, a widely used check-in and boarding software system developed by Collins Aerospace.
- The cyberattack disabled electronic check-ins and baggage drops.
- Airports were forced to switch to manual processes.
- RTX confirmed a “cyber-related disruption” but gave no details on the attacker.
Although manual operations allowed flights to continue, the sudden transition caused long queues, delays, and cancellations.
The Scale of the Impact
Widespread Delays and Cancellations
The attack rippled across Europe’s busiest airports. According to aviation data provider Cirium, by 11:30 GMT, 29 departures and arrivals had already been cancelled.
- Heathrow, Berlin, and Brussels faced significant disruption.
- Dublin and Cork reported minor but noticeable impacts.
- Brussels Airport asked airlines to cancel half of departing flights on Sunday to avoid overwhelming passengers.
Passenger Experience
While officials worked behind the scenes, passengers faced uncertainty.
“We haven’t been told anything except that there was a technical fault,” said traveler Kim Reisen in Berlin.
Others expressed frustration at the inability of airports to defend against such attacks, pointing out the risks of overreliance on digital systems.
Cybersecurity Concerns in Aviation
Fragility of Digital Systems
Airports depend on interconnected digital systems for passenger management, baggage handling, and flight scheduling. A disruption in one component can ripple across the entire ecosystem.
Cybersecurity expert Rafe Pilling described the event as a reminder of the “fragile and interdependent nature of the digital ecosystem underpinning air travel.”
A Familiar Target: Collins Aerospace
Collins Aerospace has faced cybersecurity scrutiny before. In 2023, breach-tracking websites reported that ransomware groups had targeted the company. While RTX has not confirmed whether the latest attack is connected, it raises questions about ongoing vulnerabilities.
Government and Airline Responses
Government Reaction
Authorities in the UK, Belgium, and Germany said they were closely monitoring the situation. British transport minister Heidi Alexander confirmed she was receiving updates, while cybersecurity agencies were in contact with airports.
The European Commission added that while the disruption was significant, there was no evidence of a “widespread or severe attack.”
Airlines’ Mitigation Strategies
- EasyJet said operations remained normal.
- Delta Air Lines implemented a workaround and reported minimal impact.
- United Airlines experienced minor delays but no cancellations.
- Other carriers, including Ryanair and IAG, did not immediately respond.
The mixed responses highlight differences in preparedness among airlines when confronted with sudden digital outages.
Broader Implications: A Wake-Up Call
This incident is part of a growing trend of cyberattacks targeting critical infrastructure. Earlier in 2025, Jaguar Land Rover halted production due to a breach, and hospitals across Europe have also faced ransomware attacks.
For aviation, the message is clear: cybersecurity is now as critical as physical security. Industry leaders must invest in stronger defenses, real-time monitoring, and contingency planning to maintain resilience.
What Comes Next
Strengthening Aviation Cybersecurity
Experts say airports and their technology providers should:
- Invest in multi-layered cybersecurity defenses.
- Conduct regular penetration testing and audits.
- Maintain manual backup systems for critical operations.
- Improve communication protocols to passengers during disruptions.
Lessons for Passengers
For travelers, the takeaway is preparation:
- Always check flight status online before heading to the airport.
- Keep essential items in carry-on luggage.
- Be flexible and ready for delays when unforeseen events occur.
Conclusion: A Vulnerability That Cannot Be Ignored
The September 20 cyberattack may be resolved within days, but its implications will linger. It exposed vulnerabilities in the aviation industry’s digital backbone and raised urgent questions about resilience in an era of increasing cyber threats.
For airlines, airports, and passengers, the incident is a reminder that the convenience of digital systems must be balanced with robust defenses—and that cybersecurity in aviation is no longer optional but essential.