Cyberattack Strikes European Airports, Halts Automated Check-In

Lead: A cyberattack on the check-in and boarding software provider Collins Aerospace disrupted operations at Heathrow, Brussels and Berlin airports on Saturday, causing multiple flight delays and cancellations across Europe.

Nut Graf: The incident exposed vulnerabilities in third-party aviation technology, forcing airports to revert to manual passenger processing and straining staff and passengers alike. Its scale underscores growing cybersecurity risks in critical transport infrastructure.

Impact and Response

  • Widespread Delays and Cancellations: Brussels Airport reported at least 10 flight cancellations and 17 delays exceeding one hour, urging travelers to verify flight status before departing for the airport.
  • Manual Operations: Automated check-in kiosks and baggage drops were disabled, with staff instructing passengers to queue for manual check-in and boarding.
  • Affected Hubs: London’s Heathrow - Europe’s busiest airport - and Berlin’s Brandenburg Airport confirmed similar disruptions, deploying extra personnel to assist passengers and minimize queues.
  • Unaffected Airports: Frankfurt and Zurich airports reported no impact, as their operations rely on different service providers.

Technical Details

Collins Aerospace, a unit of RTX Corp., supplies the MUSE software used by numerous airlines for electronic check-in and boarding. The company acknowledged a “cyber-related disruption” to its systems late Friday, September 19, and is actively working to restore full functionality.

Passenger Guidance

  • Flight Verification: Confirm departure status with airlines before traveling to the airport.
  • Arrival Times: Plan for extended check-in periods; arrive at least three hours before long-haul flights.
  • Assistance: Seek help from additional check-in staff deployed at affected terminals.

Broader Implications

This attack highlights the growing threat of cyber intrusions targeting aviation technology. Experts warn that reliance on centralized third-party systems can create single points of failure and call for strengthened cybersecurity protocols across all airport technology platforms.