ClosedHighNo fix needed
Collins Aerospace MUSE ransomware knocks out check-in at Heathrow, Brussels and Berlin
Collins Aerospace MUSE (airport check-in and boarding)
Ransomware hit RTX's Collins Aerospace MUSE passenger-processing software on September 19, 2025, breaking electronic check-in, bag drop and boarding at several European airports. Airports fell back to manual check-in and handwritten boarding passes; Brussels was still disrupted days later. ENISA confirmed it was ransomware.
Why this severity: Ransomware on a shared airport vendor; multi-day disruption
- Started
- Sep 19, 2025
- Closed
- Sep 24, 2025
Affected
- n/a
Fixed in
No fixed release yet
Timeline4
News & write-ups4
- EU agency confirms ransomware attack behind airport disruptionsReuters · Sep 22, 2025
- RTX confirms hack of passenger boarding software involved ransomwareCybersecurity Dive
- Cyberattack disrupts check-in systems at major European airportsNPR · Sep 20, 2025
- Collins Aerospace working on restoring software for airlines hit by cyberattackReuters · Sep 24, 2025
Notes & caveats
closedAt approximates recovery; some airports ran degraded longer.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
