European airports struggle with cyberattack on core check-in systems

A cyberattack on MUSE software controlled by Collins Aerospace has knocked out electronic check-in, baggage drop and boarding systems at several top European airports including Heathrow, Brussels and Berlin. Flight delays and cancellations have followed as staff switch to manual processing.

Collins Aerospace, a subsidiary of RTX Corporation, confirmed a “cyber-related disruption” to its Multi-User System Environment software. The disruption has affected both passenger and baggage handling functions, though airports have said that operations continue using manual methods.

In Brussels Airport roughly ten flights were cancelled and about fifteen delayed by more than an hour. Berlin’s Brandenburg Airport reported longer check-in queues, and Heathrow said the disruption to departing passengers may cause delays but that there were no cancellations directly attributed to the attack. Airports such as Roissy, Orly and Le Bourget in the Paris region stated they had not been impacted.

Some airlines say they have implemented workarounds. EasyJet and Delta indicated that their operations will likely be only minimally affected as they shift to backup or manual procedures. Experts warn that this incident underlines vulnerabilities in aviation infrastructure, especially where third-party vendors supply essential system components.

Security analysts note the attack appears to be supply-chain based, striking a system used by multiple airports across borders. Some have described the breach as more akin to vandalism than a ransom-oriented intrusion, though attribution remains unconfirmed.