RTX Confirms Airport Services Hit by Ransomware

RTX has officially confirmed that airport services were disrupted by a ransomware incident, disclosed in an SEC filing after the company became aware of the breach on 19 September 2025. The disruption affected the MUSE passenger processing software used by multiple airlines to share check‑in and gate resources, with RTX stating that the airport systems operate on customer networks outside the RTX enterprise.

The firm noted that customers have resorted to backup and manual processes, contributing to flight delays and cancellations, and that European airports are still experiencing outbound disruptions. Two cybersecurity experts, Kevin Beaumont and Dominic Alvieri, have independently confirmed that the attack involved an obscure ransomware strain called HardBit.

A 40-year-old man was arrested in the UK as part of the investigation but has been released on bail, with authorities not yet sharing further details about his identity or potential affiliation.