Since Friday, Europe’s busiest airports person faced important disruptions aft hackers deed automated check-in systems.
Published On 22 Sep 2025
A cyberattack that has caused large airport disruptions successful the United Kingdom, Germany and Belgium was caused by ransomware, the European Union Agency for Cybersecurity (ENISA) says.
In a connection connected Monday, ENISA said instrumentality enforcement was progressive to analyse the bundle that holds information until those targeted wage to person their entree back.
Recommended Stories
list of 3 items- list 1 of 3Joint planetary cognition takes down pro-Russian hacking group
- list 2 of 3Russia-Ukraine war: List of cardinal events, time 1,299
- list 3 of 3Delays proceed to impact thousands arsenic cyberattack hits Europe’s airports
ENISA did not elaborate connected wherever the ransomware had originated.
Since Friday night, respective of Europe’s biggest airports person faced disruptions aft hackers took retired automated check-in systems developed by Collins Aerospace, affecting dozens of flights and thousands of passengers.
Collins Aerospace, owned by weaponsmaker RTX, formerly Raytheon Technologies, said connected Monday that it was moving with the airports targeted by the ransomware, including Brussels and London’s Heathrow, and was successful the last stages of completing updates to assistance reconstruct them to afloat functionality.
However, Berlin Brandenburg Airport inactive did not person its check-in systems restored connected Monday, and delays of much than an hr for departures were reported.
At Brussels Airport, iPads and laptops were being utilized to cheque successful passengers online. Among the 550 departing and arriving flights connected Monday, 60 had to beryllium cancelled, the airdrome said.
According to Rafe Pilling, manager of menace quality astatine the British cybersecurity steadfast Sophos, determination person been much ransomware attempts targeting high-profile victims owed to the attraction they bring but these kinds of attacks person not been happening frequently.
“Disruptive attacks are becoming much disposable successful Europe, but visibility doesn’t needfully adjacent frequency,” helium told the Reuters quality agency.
“Truly large-scale, disruptive attacks that spill into the carnal satellite stay the objection alternatively than the rule,” helium added.
Last week, the German manufacture radical Bitkom recovered that successful a survey of astir 1,000 companies, malicious bundle was the astir communal signifier of cyberattack. One successful 7 of the companies reported having paid a ransom to entree information that had been locked up.
It added that the astir effectual method remained cyberattacks, often carried retired with ransomware, and ransom payments had reached a grounds precocious of 202 cardinal euros ($238bn) this year.