A ransomware attack targeted Collins Aerospace’s ARINC cMUSE software, a critical system used by airlines to manage shared check-in desks and boarding gates at major European airports, including London Heathrow, Brussels, and Berlin. The attack—identified as a variant of Hardbit ransomware—caused severe operational disruptions, forcing airlines to revert to manual passenger processing. Recovery efforts were hampered by repeated reinfections, prolonging downtime. While no data breach was explicitly confirmed, the incident disrupted flight operations, airline workflows, and customer experiences, with lingering effects on check-in systems even after partial restoration. The attack’s supply-chain nature amplified its impact, affecting multiple airlines and airports simultaneously. Authorities, including the UK’s National Crime Agency (NCA), arrested a suspect in the UK, but the investigation remains ongoing. The parent company, RTX, engaged cybersecurity experts and law enforcement, emphasizing the attack’s global and persistent threat to critical infrastructure.

Dublin Airport experienced significant operational disruption due to a Europe-wide cyber attack targeting check-in and boarding systems. As of midday on Sunday, 13 flights (9 inbound, 4 outbound) were cancelled, while airlines in Terminal 2 resorted to manual processes for bag tags and boarding passes, causing delays in check-in and bag drop. The incident forced passengers to allow extra time for procedures, with advisories to contact airlines directly for updates. While no data breach or ransomware was reported, the attack disrupted critical airport infrastructure, leading to financial losses for airlines, reputational damage for the airport, and passenger inconvenience (e.g., missed connections, stranded travelers). The incident also triggered a secondary security alert in Terminal 2 on Saturday, requiring evacuation and intervention by Gardaí and the Defence Forces’ EOD team, though this was later deemed unrelated to the cyber attack. The prolonged system outage highlights vulnerabilities in aviation cybersecurity, affecting thousands of travelers and airline operations across Europe.