The consequences of a recent cyberattack, which disrupted check-in systems at several European airports, are very serious, as thousands of passengers were faced with dozens of canceled and delayed flights.
Brussels Airport , which appears to have been hit hardest, said it had asked airlines to cancel nearly 140 flights scheduled for Monday because a US-based software provider “ is not yet able to provide a new secure version of the check-in system .” The airport said 25 departing flights were canceled on Saturday and 50 on Sunday.
Since late Friday, airports in Berlin, Brussels and London have been experiencing computer outages that have affected check-in processes, forcing airline staff to resort to options such as issuing boarding passes by hand or using backup laptops. Many other European airports remained unaffected.
See also: Hackers distribute BeaverTail in crypto scams
The cyberattack targeted Collins Aerospace, which helps passengers with check-in, printing boarding passes and baggage tags, and baggage handling. The US-based company reported a “cyber incident-related outage” affecting its software at “select” airports in Europe.
It was unclear who might be behind the cyberattack, but experts suggested that hackers, criminal organizations or government agencies might be involved.
The European Commission said that aviation safety and air traffic control were not affected. There was no indication of a large-scale or serious attack, and the origin of the incident remains under investigation.
Cyberattack: The biggest problems at Brussels Airport
While departures boards for London Heathrow and Berlin Brandenburg showed signs of smoother operation on Sunday, Brussels Airport continued to face significant problems. The airport said it had asked airlines to cancel half of its 276 scheduled departing flights on Monday due to ongoing problems with check-in system Collins Aerospace's . Cancellations and delays will continue as long as manual check-in is necessary.
See also: MalTerminal AI malware: Abuse of OpenAI's GPT-4
RTX Corp., the parent company of Collins Aerospace, did not immediately respond to requests for comment. On Saturday, the company said it was working to resolve the issue, noting that the impact was limited to customer online check-in and baggage drop. However, it explained that the problem could have been mitigated with manual check-in operations.
Brussels Airport managed to maintain 85% of scheduled departures over the weekend, thanks to the participation of additional staff from airport partners and the continued operation of automatic baggage delivery systems and online check-in.
The cyberattack only affected computer systems at check-in desks, not the automated teller machines, according to airport spokeswoman Ihsane Chioua Lekhli. Teams were using alternative backup systems and laptops to deal with the situation.
Airports advised passengers to check their flight status before travelling and to use alternative check-in methods. A statement from Heathrow acknowledged the delays and stressed that the majority of flights continued to operate through cooperation with airlines.
See also: Cyberattacks on Critical Infrastructure: A Threat to National Security
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
The Brandenburg Airport website reported longer waiting times due to the systems outage and encouraged passengers to use online check-in, self-service check-in and the express baggage delivery service.
Cybersecurity: Technology, Education and Transparency
Protecting against cyberattacks in the aviation sector requires a multi-layered approach:
- Investments in cutting-edge cyber defense: Development of strong firewalls, threat detection through AI, data encryption and continuous network monitoring.
- Staff training: The human factor is often the weakest link. Training in phishing, password management, and incident response is essential.
- Regulatory compliance and transparency: Companies must comply with international cybersecurity regulations and maintain a transparent notification policy in cases of breaches.
- Collaboration with authorities and other companies: Sharing information about threats and vulnerabilities strengthens collective defense.
As digital transformation continues at a rapid pace, companies must address cybersecurity as a matter of vital importance. It is not just a matter of technology but of trust and survival.
