A man has been arrested in West Sussex following a major cyber attack that caused significant disruption at airports across Europe, including Heathrow. The National Crime Agency (NCA) confirmed the arrest of a man in his forties as part of an investigation into a cyber incident impacting Collins Aerospace. He was detained on suspicion of offences under the Computer Misuse Act and has since been released on bail.
Paul Foster, head of the NCA’s national cyber crime unit, stated, “Although this arrest is a positive step, the investigation into this incident is in its early stages and remains ongoing.” The attack targeted baggage and check-in software supplied by Collins Aerospace, leading to hundreds of delayed and cancelled flights. At London Heathrow, the UK’s largest airport, some automated check-in and boarding functions were unavailable, resulting in manual processing and delays for certain flights. However, many services returned to normal as systems were recovered.
Brussels, Berlin, and several other European airports experienced more severe cancellations and delays. RTX Corporation, Collins Aerospace’s parent company, expressed appreciation for the NCA’s assistance but has not provided a timeline for a full recovery. Airlines and ground handlers have been advised to anticipate at least another week of manual workarounds. Additional staff have been deployed at Heathrow to assist passengers, though delays persist.
The EU’s cyber-security agency has confirmed the deployment of ransomware in the attack. Typically, ransomware is used to lock or severely disrupt IT systems, with criminal groups demanding cryptocurrency payments to restore access.
