KEY POINTS
- A man in his 40s was arrested in West Sussex over the cyber-attack.
- The attack targeted Collins Aerospace check-in and baggage software.
- Passengers faced days of delays at Heathrow, Brussels, Berlin, and Dublin.
- Ransomware was reportedly used in the attack.
Arrest in West Sussex
The UK’s National Crime Agency (NCA) confirmed that a man in his forties was arrested in West Sussex in connection with a cyber-attack that caused widespread airport disruption.
The suspect was detained on suspicion of Computer Misuse Act offences and has since been released on bail.
Paul Foster, head of the NCA’s national cyber crime unit, said:
“Although this arrest is a positive step, the investigation into this incident is in its early stages and remains ongoing.”
What Happened
The attack targeted Collins Aerospace, a U.S.-based software provider whose systems manage check-in and baggage operations at multiple European airports.
The cyber incident, first detected on Friday night, disrupted operations in Heathrow, Brussels, Berlin, and Dublin — leaving hundreds of flights delayed or canceled over the weekend.
Some passengers were forced to check in using pen and paper, while ground crews relied on manual baggage processes.
Ongoing Disruptions
At Heathrow, additional staff were deployed across terminals to help passengers, but flight delays continued well into the week.
The BBC reported that Collins Aerospace is rebuilding its systems after failed attempts to restore them earlier. The company has warned airlines and handlers to prepare for at least another week of manual workarounds.
Ransomware Attack
On Monday, the EU Cybersecurity Agency confirmed that ransomware was used in the attack.
Ransomware typically:
- Disrupts IT systems
- Encrypts critical files
- Demands ransom payments, often in cryptocurrency, to unlock them
While Collins Aerospace has not confirmed details of the ransom demand, investigators believe the attack was intended to cause serious disruption.
A Growing Threat
The attack highlights rising cyber risks in aviation. According to French aerospace company Thales, cyber-attacks against the aviation sector have increased by 600% in the past year.
With airports and airlines becoming ever more dependent on digital systems, experts warn that such incidents could become more frequent and more damaging unless security measures improve.
✈️ Bottom line: A man has been arrested, but the investigation continues. Meanwhile, passengers and airlines are bracing for more disruption as Collins Aerospace works to rebuild its compromised systems.
