{"id":114580,"date":"2025-09-25T11:11:00","date_gmt":"2025-09-25T05:41:00","guid":{"rendered":"https:\/\/aviationa2z.com\/?p=114580"},"modified":"2025-09-25T10:22:29","modified_gmt":"2025-09-25T04:52:29","slug":"british-police-arrest-man-linked-to-european-airport-cyber-attack","status":"publish","type":"post","link":"https:\/\/aviationa2z.com\/index.php\/2025\/09\/25\/british-police-arrest-man-linked-to-european-airport-cyber-attack\/","title":{"rendered":"British Police Arrest Man Linked to European Airport Cyber Attack"},"content":{"rendered":"\n

LONDON-<\/strong> British police arrested a man in his forties linked to a cyberattack that disrupted the MUSE check-in and boarding system at major European airports, including London Heathrow Airport (LHR)<\/a>, Brussels Airport (BRU), and Berlin Brandenburg Airport (BER).<\/p>\n\n\n\n

The incident, reported by PYOK<\/a>, struck late Friday, forcing manual operations and causing widespread delays for airlines like British Airways (BA) and Lufthansa (LH).<\/p>\n\n\n\n

Collins Aerospace, the US-based provider of the affected software, continues efforts to restore full functionality after a corrupted patch delayed recovery. While Heathrow and Berlin now operate normally, Brussels faced severe restrictions until midweek.<\/p>\n\n\n\n

\"Tragedy
Photo: Ferrovial Construction<\/figcaption><\/figure>\n\n\n\n

British Police Arrest Man<\/h2>\n\n\n\n

The cyberattack targeted Collins Aerospace’s MUSE software, a multi-user system that enables shared check-in desks and boarding gates for multiple airlines at airports worldwide<\/p>\n\n\n\n

This Friday night breach rendered automated check-in and baggage drop inoperable at key facilities, compelling staff to switch to manual processes.<\/p>\n\n\n\n

Heathrow Airport (LHR) reported initial delays affecting hundreds of flights, but British Airways (BA)<\/a> activated backup systems to minimize the impact.<\/p>\n\n\n\n

In contrast, Brussels Airport (BRU)<\/a> suffered the heaviest toll, with airlines such as Brussels Airlines (SN) and Ryanair (FR) facing queue overloads that prompted 50 cancellations on Sunday alone out of 257 scheduled departures.<\/p>\n\n\n\n

Berlin Brandenburg Airport (BER) experienced moderate disruptions, primarily for Lufthansa (LH) and Eurowings (EW) operations, but recovered swiftly through coordinated manual handling.<\/p>\n\n\n\n

Aviation data from Cirium showed 29 total cancellations across the three airports by midday Saturday, underscoring the attack’s ripple effects on 1,105 combined scheduled flights.<\/p>\n\n\n\n

Cybersecurity experts note that such incidents exploit centralized third-party dependencies, amplifying vulnerabilities in aviation’s digital backbone.<\/p>\n\n\n\n

The European Union Agency for Cybersecurity later classified the breach as a ransomware operation, highlighting a 600% surge in sector-targeted attacks from 2024 to 2025.<\/p>\n\n\n\n

\"Emirates
Photo: By Mitchul Hope – Emirates | A6-EOT | Airbus A380-841 | London Heathrow Airport (LHR\/EGLL), CC BY-SA 2.0, https:\/\/commons.wikimedia.org\/w\/index.php?curid=129305856<\/figcaption><\/figure>\n\n\n\n

Arrest and Ongoing Investigation<\/h2>\n\n\n\n

Britain’s National Crime Agency (NCA) conducted the arrest on Tuesday evening in West Sussex, charging the suspect under the Computer Misuse Act for alleged involvement in the disruption.<\/p>\n\n\n\n

NCA Deputy Director Paul Foster, leading the National Cyber Crime Unit, described the operation as a key early milestone, though the probe remains active with no further suspects named.<\/p>\n\n\n\n

The man, released on conditional bail, awaits further questioning as investigators trace the attack’s origins, potentially tied to prior breaches at Collins Aerospace in 2023.<\/p>\n\n\n\n

The NCA collaborates with the UK’s National Cyber Security Centre, the Department for Transport, and international partners to assess broader implications.<\/p>\n\n\n\n

Foster emphasized that while manual mitigations contained immediate chaos, full digital restoration demands rigorous forensic analysis to prevent recurrence.<\/p>\n\n\n\n

No evidence links the incident to state actors, but officials monitor for copycat threats in high-traffic aviation networks.<\/p>\n\n\n\n

\"Tragedy
Photo: Heathrow Airport<\/figcaption><\/figure>\n\n\n\n

Recovery Challenges and Rebuild Efforts<\/h2>\n\n\n\n

Collins Aerospace identified the intrusion Saturday, initially deploying a patch Monday that testing revealed as corrupted, affecting over 1,000 systems. <\/p>\n\n\n\n

his forced a complete rebuild of software environments for impacted airlines, a labor-intensive process involving on-site reconfiguration at airports.<\/p>\n\n\n\n

An internal Heathrow memo detailed overnight work by Collins teams, yet persistent glitches extended delays into Tuesday.<\/p>\n\n\n\n

By Wednesday, Brussels Airport (BRU) eased caps to 10% of flights, down from 50% cuts, while Heathrow (LHR) and Berlin (BER) resumed full schedules. RTX, Collins’ parent, confirmed impacts stayed limited to electronic processes, with no data breaches reported.<\/p>\n\n\n\n

Experts warn that rebuilding exposes temporary weaknesses, urging airlines to diversify vendors. Full resolution timelines remain fluid, but Collins stated Monday it nears completion of secure updates for all four affected sites.<\/p>\n\n\n\n

\"British
By Andrew Milligan sumo – Departures Terminal 5, London Heathrow Airport, CC BY 2.0, https:\/\/commons.wikimedia.org\/w\/index.php?curid=105402952<\/figcaption><\/figure>\n\n\n\n

Broader Implications<\/h2>\n\n\n\n

This event exposes aviation’s reliance on single providers like Collins, creating single points of failure that hackers exploit for maximum disruption.<\/p>\n\n\n\n

Past incidents, including a 2023 Collins breach, signal escalating risks from ransomware groups targeting operational tech. Regulators now push for enhanced resilience, such as redundant systems and real-time threat sharing.<\/p>\n\n\n\n

Airlines face mounting pressure to invest in cyber defenses amid rising costs from delays\u2014estimated at millions daily. Travelers encounter manual checks’ inefficiencies, from longer waits to higher error rates in boarding.<\/p>\n\n\n\n

The incident accelerates EU-wide mandates for critical infrastructure audits, aiming to shield passengers and operators from future digital assaults.<\/p>\n\n\n\n

Stay tuned with us. Further, follow us on social media for the latest updates.<\/p>\n\n\n\n

Join us on\u00a0Telegram Group\u00a0<\/a>for the Latest Aviation Updates. Subsequently, follow us on\u00a0Google News<\/a><\/p>\n\n\n\n

\n
British Airways Drunk 787 Pilot Arrested at Edinburgh Airport<\/a><\/blockquote>