Cyberattack cripples Aeroflot, causing widespread flight disruptions and service outages

Russia’s largest airline, Aeroflot, suffered a major system outage on Monday following a massive cyberattack that has led to significant delays, cancellations, and service disruptions.

The Russian Prosecutor General’s Office confirmed the disruption was caused by a cyberattack, with hacker groups Silent Crow and the Belarusian Cyber Partisans claiming responsibility. They say the operation took a year to plan and resulted in the destruction of around 7,000 servers and the theft of 20 terabytes of data, effectively crippling Aeroflot’s IT systems.

As a result, Aeroflot is currently unable to process refunds for cancelled flights. The refund system will remain offline until internal services are restored. The airline has urged passengers not to come to the airport if their flight is cancelled to avoid worsening the situation.

Sister carriers Rossiya and Pobeda, which, along with Aeroflot, make up Russia’s largest airline group, reported no issues. In 2024, the group carried over 55 million passengers, accounting for 42% of Russia’s air travel market. The attack follows recent disruptions caused by Ukrainian drone threats near Moscow’s Sheremetyevo Airport, Aeroflot’s main hub.