EU agency ENISA says ransomware attack behind airport disruptions

EU agency ENISA says that disruptions at multiple European airports were caused by a cyberattack linked to ransomware, with a third‑party services provider affected and law enforcement now investigating. The incident disrupted Collins Aerospace Muse software, impacting check‑in and boarding systems at Heathrow, Brussels and Berlin, and led to lengthy delays and widespread manual operations.

The outage, which began on Friday night, left thousands of passengers experiencing long queues and delays as airports shifted to manual check‑in procedures. ENISA’s confirmation comes as part of an ongoing investigation by authorities into the ransomware incident affecting the third party. Collins Aerospace is a major American company that RTX describes as a subsidiary of RTX (formerly Raytheon Technologies), providing avionics, interiors and other systems for aircraft and airport operations. Berlin Airport remained disrupted into Monday, with travellers reporting ongoing impacts and delays.