A man in his forties has been arrested in West Sussex in connection with a cyber-attack that has disrupted airports across Europe, including London Heathrow. The National Crime Agency (NCA) said the arrest was part of an investigation into a cyber incident targeting Collins Aerospace, the US software firm whose systems power check-in and baggage handling for multiple airlines.
Flights Hit by Days of Delays
The cyber-attack, first detected on Friday night, has led to hundreds of delayed or cancelled flights at major hubs including Heathrow, Brussels, Dublin, and Berlin. With Collins Aerospace’s systems offline, airlines have been forced to resort to manual check-in processes, with boarding passes handwritten and baggage processed by pen and paper.
At Heathrow, extra staff have been drafted in to assist passengers, though delays continue. Berlin Airport said on Wednesday morning that check-in and boarding remained “largely manual,” resulting in long queues and disruption. Brussels Airport urged passengers to check in online before arriving.
Ransomware Suspected
On Monday, the EU’s cyber-security agency confirmed ransomware was used in the attack. Such attacks encrypt victims’ data and demand ransom payments in cryptocurrency. Cyber-crime groups are estimated to earn hundreds of millions of pounds annually from similar operations.
Paul Foster, head of the NCA’s National Cyber Crime Unit, said: “Although this arrest is a positive step, the investigation into this incident is in its early stages and remains ongoing.” The arrested man has been released on bail.
Collins Aerospace Response
Collins Aerospace, a subsidiary of RTX Corporation, has been attempting to restore its systems but has warned airlines to prepare for at least another week of manual workarounds. In an internal memo seen by the BBC, Heathrow staff were told the company was effectively rebuilding its check-in system after initial recovery attempts failed.
RTX Corporation said it appreciated the NCA’s assistance, but has not provided a timeline for full restoration.
A Growing Threat to Aviation
The aviation industry has become a prime target for cyber-criminals. A recent report by French aerospace firm Thales found cyber-attacks on the sector rose by 600% in the past year, raising concerns about the resilience of critical infrastructure.
Despite the disruption, Heathrow said “the vast majority of flights are operating as normal,” while continuing to advise passengers to check their flight status before travelling.
