Heathrow Hit by Cyber-Attack: Check-In Chaos

c

Travelers across Europe woke up to a nightmare on September 20, 2025, as a sophisticated cyberattack hit major airports, including London's Heathrow, Birmingham's Mango, Brussels, and Berlin Brandenburg, crippling check-in and boarding systems. The disruption, caused by a targeted attack on service provider Collins Aerospace, forced manual operations and led to widespread delays and cancellations. As airlines and authorities race to restore normalcy, this incident raises concerns about cybersecurity in aviation and the vulnerability of global travel infrastructure. Here's a closer look at what happened, the fallout, and the steps being taken to address the crisis.

The cyber-attack targeted Collins Aerospace, a subsidiary of RTX, which provides vital software for electronic check-in and baggage handling to several airlines. Labeled as a "cyber-related disruption," the incident made automated systems inoperable, forcing airports to switch to manual processes. Although no group has claimed responsibility, the scope indicates a coordinated effort, possibly exposing vulnerabilities in digital defenses for essential services.

Affected airports include Heathrow, where the issue impacted software used by several carriers; Brussels Airport, which confirmed the cyber-attack on September 19; and Berlin Brandenburg, along with others like Amsterdam Schiphol. Frankfurt Airport, however, reported no disruptions. This selective impact highlights the interconnected yet fragile nature of aviation technology systems.

The fallout was immediate and severe. At Brussels Airport, the attack caused a "large impact on the flight schedule," leading Eurocontrol to ask airlines to cut their operations in half between 4:00 and 12:00 GMT, resulting in many cancellations and delays. By mid-morning, FlightAware reported nearly 100 delays at Heathrow, around 70 at Brussels, and 15 at Berlin.

Passengers encountered longer lines at check-in, with manual boarding procedures taking up a lot of time. Many took to social media to share their frustrations, recounting missed connections and disrupted plans. Heathrow recommended that travelers check their flight statuses with airlines before heading out and arrive no earlier than three hours for long-haul flights or two hours for domestic ones to avoid overcrowding. For those with Saturday flights, confirming with carriers is essential to minimize the hassle.

This disruption is happening at a busy time for European travel, adding to the chaos and potentially costing airlines millions in operational delays and compensation.

Airports and providers have mobilized quickly. Heathrow deployed additional staff in check-in areas to assist passengers and minimize delays, emphasizing that the issue is external and is being addressed urgently. Brussels Airport switched entirely to manual check-in and boarding, while Berlin noted ongoing efforts for a swift resolution.

RTX, the parent company of Collins Aerospace, stated they are "working to resolve the issue as quickly as possible," clarifying that only electronic systems are affected, allowing manual fallbacks to keep operations running. Authorities, including aviation regulators, are monitoring the situation, with no broader security threats reported. Investigations into the attack's origins are underway, though details remain scarce.

Notably, British Airways was not affected due to its own backup systems.

This cyber-attack isn't isolated—aviation has encountered similar threats before, from ransomware attacks on airlines to disruptions in air traffic control. It highlights the need for strong cybersecurity measures in an industry that depends on digital systems for everything from ticketing to flight management. Experts warn that as travel recovers after the pandemic, such vulnerabilities could lead to more frequent incidents if not addressed.

For travelers, it's a reminder to stay updated through airline apps or websites and consider purchasing travel insurance that covers cyber-related delays. Airports might invest in backup systems or improved protocols to avoid future outages.

As the day goes on, updates from affected hubs indicate a slow recovery, but complete restoration might take hours or days. Travelers are advised to stay patient and flexible during this disruption.