Aviation Industry Urged to Prioritize Cybersecurity Amid Rising Threats and IT Modernization The aviation and travel sectors face a critical juncture as outdated IT systems strain under growing passenger volumes and escalating cyber threats, according to Martin Smillie, Senior Vice President of Communications and Data Exchange at SITA. Speaking at the launch of a new white paper on SITA Connect Go, Smillie emphasized the urgent need for secure, cloud-native infrastructure to ensure operational resilience and data protection. A recent SITA Air Transport IT Insights report revealed that 66% of airlines and 73% of airports now rank cybersecurity among their top three priorities, reflecting the sector’s heightened vulnerability to digital attacks. The financial stakes are substantial—IBM estimates the average cost of a security breach at $4.44 million for large global companies. Smillie stressed that the industry must move beyond reactive measures, embedding cybersecurity into core business strategy. Key steps include modernizing IT infrastructure, adopting cloud-native platforms, and implementing Secure Access Service Edge (SASE) networks to enhance visibility and incident response. SITA Connect Go, a purpose-built solution for air transport, exemplifies this shift by delivering secure, scalable connectivity that simplifies network architecture and reduces operational complexity. With passenger demand surging and airports under increasing pressure, the industry’s IT spending is projected to reach $37 billion for airlines and $9 billion for airports in 2024. While innovations like biometrics, AI, and sustainable IT solutions are reshaping operations, Smillie warned that these advancements must be underpinned by robust security. As cyber threats grow in sophistication, the sector’s resilience hinges on infrastructure capable of evolving alongside emerging risks. SITA Connect Go aims to future-proof operations by enabling real-time analytics, cost reduction, and seamless integration of next-generation technologies. Smillie framed the challenge as a defining moment for aviation: to meet the demands of a digitally connected world, the industry must prioritize cybersecurity at the heart of its transformation.

Global Airline Passenger Data Breach Exposes Frequent Flyer Information A sophisticated cyberattack on Sita, a Geneva-based IT provider serving approximately 90% of the global aviation industry, has compromised the personal data of hundreds of thousands of airline passengers worldwide. The breach, detected on 24 February, targeted Sita’s passenger service system (PSS) servers, which handle ticketing, baggage processing, and other critical operations for major airlines. Sita, which supports the Star Alliance—including carriers like Singapore Airlines, Lufthansa, United, Air New Zealand, Cathay Pacific, and Malaysia Airlines—confirmed the incident in a statement, describing it as a "highly sophisticated attack." The company acted swiftly to contain the breach and launched an investigation with external cybersecurity experts. Affected airlines were notified, with Air New Zealand informing passengers via email that the breach exposed frequent flyer data, including names, membership numbers, and tier status. However, the compromised data did not include passwords, credit card details, passport numbers, or travel itineraries. The breach highlights vulnerabilities in shared aviation IT infrastructure, as Star Alliance members routinely exchange passenger data to facilitate loyalty program benefits. Sita’s U.S.-based subsidiary, SITA Passenger Service System (US) Inc, operates the affected servers in Atlanta, though the company’s headquarters remain in Switzerland. Investigations into the attack remain ongoing.