After cyberattack on major European airports: UK arrest made, delays continue

European airports are still working to restore normal operations after a ransomware cyberattack on Collins Aerospace systems last week disrupted check-in and boarding processes across multiple hubs, including Brussels, London Heathrow, Berlin (BER), and Dublin.

The UK’s National Crime Agency (NCA) announced the arrest of a man in his forties in West Sussex on suspicion of cybercrime offences under the Computer Misuse Act. He has been released on conditional bail while investigations continue. Authorities caution that the probe is still in its early stages.

At Brussels Airport, disruptions are gradually easing. On Wednesday, about 6% of flights were cancelled – down from 9% on Tuesday – as airlines increasingly rely on alternative check-in systems. Brussels Airlines, the airport’s largest carrier, has urged passengers to check in online to avoid delays.

Berlin Brandenburg Airport warned that flight disruptions may persist for several more days. With the software provider still working to deliver a secure fix, airlines continue to rely heavily on manual processes, causing longer wait times, delays, and some cancellations. Passengers are advised to check flight status in advance and use online or self-service check-in where possible.

While airports and airlines are mobilising resources to limit the fallout, the incident highlights the vulnerabilities of aviation’s digital infrastructure. Investigators continue to assess the full impact of the ransomware attack.