A cyberattack on Collins Aerospace, which manages the automated check-in and boarding systems for dozens of airlines worldwide, caused significant disruption to the European aviation network on Saturday, September 20. The attack resulted in long delays, queues and flight cancellations at Heathrow airports in London, Brussels and Berlin, while the effects continued on Sunday.
According to analytics firm Cirium, 35 departures and 25 arrivals were cancelled at the three major airports on Saturday, while on Sunday that number rose to 38 departures and 33 arrivals. Dublin Airport was also affected, but said it expected to operate as normal.
Infrastructure resilience issue
While authorities have insisted there was no safety issue, the incident has once again highlighted the vulnerability of the aviation industry to supply chain attacks. Collins Aerospace’s systems are used by many airlines in different countries. So a single successful attack can cause a domino effect of disruptions across national borders.
The attack exposed fundamental weaknesses in digital transport, highlighting how reliance on a single supplier can disrupt air travel. Experts are calling for enhanced security, contingency plans and vigilance to protect travelers and airlines.
Charlotte Wilson, head of business services at Check Point, noted that aviation is “an extremely attractive target for cybercriminals precisely because of its reliance on shared digital systems.” She said that building resilience requires regular software updates, well-tested backup systems and, most importantly, better collaboration between technology providers, airlines and governments.
A growing phenomenon
In recent years, cyberattacks and technology system outages have wreaked havoc at airports around the world, from Japan to Germany, as air travel increasingly relies on online, interconnected systems.
According to a report by French aerospace company Thales published in June, the aviation sector saw a 600% increase in cyberattacks from 2024 to 2025.
Cyberattacks are not limited to air travel. Just last week, Jaguar Land Rover extended a production shutdown due to a similar attack, while Marks & Spencer had earlier announced that a cyber breach could reduce its annual profits by almost a third.
In the air transport industry, however, the impact is particularly critical, as every minute of delay translates into financial losses, damage to companies’ reputations and, most importantly, inconvenience for hundreds of thousands of passengers.
The next day
Regulators are expected to examine the incident and assess the need for stricter cybersecurity requirements at airports. The debate about creating a common European rapid response mechanism for such incidents is resurfacing, with experts stressing that “cyber attacks do not stop at borders” and that only a coordinated defense can prevent new crises.
For travelers, Saturday’s incident was a reminder that even the most modern infrastructure is not invulnerable. For the airline industry, however, it is a wake-up call that the next big challenge lies not in the air, but on the digital terrain on which its entire operation rests.
