UK Police Arrest Suspect Tied to Ransomware Attack on European Airports

UK police have arrested a man in his forties in West Sussex as part of an investigation into a ransomware incident that disrupted several major European airports, including London Heathrow. According to the National Crime Agency, the arrest was made on Tuesday evening on suspicion of offences under the Computer Misuse Act, and he has since been released on bail while inquiries continue.

The NCA said the arrest relates to an incident impacting Collins Aerospace, the US-based supplier of baggage handling and check-in software, whose systems failed on Friday night and forced airports such as Heathrow, Brussels, Dublin and Berlin to revert to manual processes. An internal memo seen by the BBC indicated Heathrow staff were advised of ongoing difficulties and contingency procedures.

Paul Foster, head of the NCA’s national cyber crime unit, described the arrest as a positive step but noted the inquiry remains at an early stage and ongoing, with RTX Corporation thanking the NCA for assistance. The ransomware attack led to hundreds of flight delays and cancellations, and universities and airlines have had to plan for continued manual operations as the investigation proceeds. ENISA confirmed that ransomware was deployed in this incident.