European Airports Experience Major Disruptions as Ransomware Attack On Collins Aerospace Leads to Widespread Flight Cancellations: New Updates

Written By: Paromita Ghosh

Paromita Ghosh

See Full Bio

September 22, 2025 19:03 GMT+5:30

Image generated with Ai

A massive ransomware attack targeting Collins Aerospace’s MUSE passenger-handling system has caused widespread disruptions at several major European airports. The incident, which took place on September 22, has affected airports including Brussels, London Heathrow, and Berlin Brandenburg, leading to flight cancellations, long queues, and operational delays. This cyberattack has forced airports and airlines to revert to manual procedures as technicians work around the clock to restore the affected systems. Passengers traveling through these airports have faced significant delays, and airlines have scrambled to accommodate the disruptions, further complicating air travel across Europe.

As travel demand continues to rise, especially with the return of international tourism, the attack on such a critical system highlights vulnerabilities in airport operations and the ongoing challenges posed by cyber threats.

Brussels Airport Faces Severe Disruptions

Brussels Airport, one of the hardest-hit locations, issued a request for airlines to cancel approximately half of their departures on September 22, as the MUSE system failure caused major bottlenecks at check-in counters. The loss of automated check-in systems led to long wait times, with travelers reporting delays of up to two hours or more to check in. The limited processing capacity prompted the airport to reduce flight schedules to avoid congestion and ensure passenger safety. Despite these cancellations, most flights eventually departed, albeit with significant delays.

London Heathrow and Berlin Brandenburg Also Affected

London Heathrow, Europe’s busiest airport, confirmed that while flights continued to operate, long queues formed as staff manually processed check-ins. The reliance on paper boarding passes and manual procedures slowed turnaround times, leading to delays across the airport. Similarly, Berlin Brandenburg, which faced additional pressure from the Berlin Marathon over the weekend, saw massive queues and slow processing. Passengers in Berlin were frustrated by the delays, as ground staff scrambled to keep up with the influx of travelers.

Despite the disruption, flight safety was not impacted, and air traffic control systems continued to function normally, according to Eurocontrol, Europe’s air traffic management body. However, operational efficiency was significantly reduced across all affected airports.

The Impact on Passengers and Airlines

The ransomware attack disrupted the travel plans of tens of thousands of passengers across Europe. Airlines struggled to accommodate affected travelers, rebooking flights and managing cancellations while passengers faced long waits to get rechecked manually. Airlines at Brussels Airport were forced to cancel flights to prevent further congestion in the terminal, but many passengers were left stranded with limited information. At Heathrow and Berlin, some passengers waited more than two hours for check-in, with most flights departing with delays rather than being fully canceled.

The lack of automated baggage handling further contributed to the delays, as it slowed down the turnaround process, affecting airport capacity. This incident highlights how deeply reliant airports are on their digital infrastructure and the widespread impact when systems fail.

Cybersecurity and Recovery Efforts

Collins Aerospace, which provides the MUSE system used at airports around the world, has confirmed the issue was caused by a cyber-related disruption. The company is in the process of restoring services, but no timeline for full recovery has been provided. Automated kiosks and baggage drop facilities remain unavailable, further hampering airport operations. Law enforcement and cybersecurity agencies are investigating the ransomware strain and have yet to determine whether any data was exfiltrated during the attack.

Authorities are focusing on the vulnerabilities of third-party service providers and their role in aviation cybersecurity. The incident has underscored the need for robust security measures to protect airport IT systems, which are critical to daily operations and passenger safety.

The Bigger Picture: Impact on Travel and Tourism

As international tourism rebounds, the ransomware attack at key European airports serves as a stark reminder of the cybersecurity risks that airports face. Travel and tourism have been steadily increasing since the easing of pandemic restrictions, making this disruption particularly detrimental during a busy travel period. Passengers are advised to stay updated on their flight status and allow extra time for check-in as affected airports continue recovery efforts.

With many international visitors flocking to Europe, the ripple effect of this attack could potentially dampen the travel experience for tourists, causing delays in their journey and impacting their overall satisfaction with the region’s airports.

What to Expect Moving Forward

While Collins Aerospace works on restoring the MUSE system, passengers traveling through affected airports are encouraged to check their flight status and remain patient. The recovery process is expected to take time, but with continued efforts, operations should return to normal in the coming days. The incident highlights the importance of improving cybersecurity measures across the aviation sector and ensuring that airports can function smoothly, even in the face of technological disruptions.