The EU's cybersecurity agency says a ransomware attack caused the recent disruptions that affected check-in systems at Heathrow and other European airports
- Collins Aerospace works to restore systems at key airports — Berlin Marathon worsens delays; Brussels uses manual check-ins
Context & Ripple Effects
The incident began as a cyber-related disruption at Collins Aerospace, the shared provider of check-in and boarding systems used by several airports. That supplier-level dependency turned a technical outage into a multi-airport passenger-processing problem.
The new attribution matters because it shifts the response from restoring availability alone to incident containment, investigation, and recovery assurance across affected airport operations.
First-order effects
- Collins Aerospace and affected airports must restore check-in and boarding workflows while operating manual fallbacks; Brussels' manual check-ins make the immediate throughput cost visible.
- The ransomware finding brings cybersecurity agencies and law enforcement into the response, alongside airport operators’ operational recovery work.
Second-order effects
- Airports using common passenger-processing providers will face pressure to test manual procedures, segmentation, and recovery plans rather than treat vendor outages as isolated IT events.
- Airlines, ground handlers, and passengers absorb knock-on disruption through slower processing and irregular operations when airport check-in capacity is constrained.
Third-order effects
- If shared aviation-service platforms remain attractive ransomware targets, resilience expectations will shift toward supplier-wide recovery, transparent incident reporting, and demonstrable fallback capacity.
- The episode points to a broader concentration risk: digitized airport operations can improve efficiency while allowing one provider failure to propagate across otherwise independent airports.
The trend: Ransomware is increasingly testing the operational resilience of shared digital infrastructure whose failures spill quickly into physical, customer-facing services.