A cyber-attack targeting a widely used electronic check-in and baggage system has caused significant disruption at major European airports, including London’s Heathrow, Brussels, and Berlin Brandenburg. The attack has forced airlines to resort to manual processing, leading to extensive delays and long queues for passengers.
The disruption stems from an attack on the “Muse” software, provided by Collins Aerospace, a subsidiary of RTX. The system allows multiple airlines to share common check-in desks and boarding gates. RTX confirmed it was “aware of a cyber-related disruption” affecting select airports and is working to resolve the issue. The company stated that the impact is limited to electronic check-in and baggage drop, which can be mitigated with manual operations.
At Heathrow, one of Europe’s busiest hubs, hundreds of flights were delayed on Saturday. While British Airways is reportedly operating normally using a backup system, most other airlines have been affected. The airport has deployed additional staff to manage the disruption and advises passengers to check with their airline before travelling.
Similarly, Brussels Airport reported a “large impact on the flight schedule,” leading Eurocontrol, the European aviation safety organisation, to request airlines cancel half their flights to and from the Belgian capital until Monday morning. Berlin Brandenburg Airport also confirmed longer waiting times, while Dublin and Cork airports experienced a “minor impact” with some airlines switching to manual check-in.
Travellers described scenes of chaos and frustration. One passenger at Heathrow reported queuing for over two hours for a Malaysia Airlines flight, with staff manually tagging luggage and processing check-ins over the phone. Another traveller, Monazza Aslam, missed her connecting flight after being stuck on the tarmac for over an hour. “I’ve been at Heathrow with my elderly parents since 05:00,” she said. “We are hungry and tired.”
Transport Secretary Heidi Alexander stated she was receiving regular updates and monitoring the situation. Major low-cost carriers EasyJet and Ryanair, which do not operate from Heathrow, said their services were unaffected.
The origin and nature of the cyber-attack have not yet been publicly confirmed by Collins Aerospace. While some cybersecurity experts suggest it could be a ransomware attack—where criminals encrypt systems and demand payment—it is too early to determine the perpetrators. In recent years, most major cyber-attacks have been conducted by financially motivated criminal gangs, many based in Russia or former Soviet countries, though state-sponsored actors also use similar methods. The incident highlights the growing vulnerability of the highly interconnected aviation industry to digital disruptions.
Source link