Cyber attack that downed airport systems confirmed as ransomware | Computer Weekly

"Nevertheless it is understood that the attack was first detected late on Friday 19 September and spilled over into Saturday. It caused disruption at airports including Heathrow, Berlin Brandenburg, Brussels and Dublin as staff fell back on manual procedures. The core system impacted was Collins' ARINC Multi-User System Environment (Muse) software platform, which runs services such as electronic check-in and baggage management, and is designed to enable airlines to share staff and passenger-facing resources such as check-in desks and automated kiosks, reducing complexity and expense."

"ENISA confirmed that the disruption was caused by ransomware earlier on Monday 22 September. In a statement circulated to media, a spokesperson said: "ENISA is aware of the ongoing disruption of airports' operations, which were caused by third-party ransomware incident. At this moment, ENISA cannot share further information regarding the cyber attack." A spokesperson for the NCSC said: "We are working with Collins Aerospace and affected UK airports, alongside Department for Transport and law enforcement colleagues, to fully understand the impact of an incident."

ENISA and the UK's National Cyber Security Centre activated resources after a ransomware attack on Collins Aerospace systems caused flight cancellations and delays across Europe. Collins Aerospace and parent RTX said only that they are responding to a cyber incident and gave no further details. The attack was detected late on Friday 19 September and continued into Saturday, disrupting Heathrow, Berlin Brandenburg, Brussels and Dublin as staff reverted to manual procedures. The affected system was Collins' ARINC Multi-User System Environment (MUSE), which runs electronic check-in, baggage management and shared passenger-facing resources. ENISA confirmed on 22 September that ransomware caused the disruption. The NCSC is working with Collins, affected UK airports and law enforcement and urged organisations to use its guidance and tools.

Read at ComputerWeekly.com