The Update: The attack on Collins Aerospace’s MUSE check-in and boarding software began late on Friday, 19 September 2025, with widespread disruption becoming evident the following day. By Saturday, major European airports were experiencing significant operational impacts.
The incident has affected London Heathrow, Brussels, Berlin, and Dublin airports, forcing airlines to fall back on manual check-in processes and triggering extensive delays and cancellations.
Brussels Airport has been the most severely impacted, asking airlines to cancel half of their departing flights on Monday as Collins Aerospace works to roll out a secure software update. RTX Corporation, confirmed the “cyber-related disruption” but said the impact was confined to check-in and baggage drop systems.
The UK’s National Cyber Security Centre and the European Commission are monitoring the situation, which has highlighted the vulnerability of critical aviation infrastructure to single points of failure in the supply chain. The attack has left thousands of travellers stranded and continues to cause heavy financial and operational strain on airlines and airports.
RTX Corporation, has stated in its official communication:
“We are aware of a cyber-related disruption affecting our Muse software at select airports. Our teams are actively working to restore full functionality and support customers as quickly as possible. The impact is limited to electronic check-in and baggage drop, and airlines are able to continue operations through manual processes. Further updates will be provided as more information becomes available.”
Why it Matters: This attack on Collins Aerospace is a stark reminder that the aviation sector’s dependence on interconnected, third-party systems creates systemic risk. The incident reflects a shift in cybercriminal tactics from stealing data to disrupting operations, aiming to generate maximum chaos and financial harm.
The case underscores the urgent need for the aviation industry to build stronger digital resilience, focusing not only on IT security but also on operational safety, with robust backup systems to reduce the impact of such incidents.