Yazılar

Cyberattack cripples European airports, disruptions to last into Sunday

A cyberattack on check-in and boarding systems provider Collins Aerospace caused major disruptions on Saturday across several European airports, including London’s Heathrow, Brussels, Berlin, and Dublin, with impacts expected to stretch into Sunday.

The incident targeted Collins’ MUSE software, which supports airlines worldwide. Parent company RTX confirmed a “cyber-related disruption” but gave no details on the attackers. Airports reported flight delays, cancellations, and diversions, while manual check-in procedures were deployed to keep passengers moving.

  • At Heathrow, Brussels, and Berlin, 29 flights were cancelled by mid-day out of nearly 1,100 scheduled departures.

  • Brussels Airport ordered airlines to cancel half of Sunday’s flights to avoid chaotic queues and last-minute cancellations.

  • Berlin and Dublin airports reported long wait times, while Frankfurt remained unaffected.

The European Commission said there was no indication of a “widespread or severe attack,” though investigations are ongoing. Experts warned the case underscores the fragility of aviation’s digital ecosystem, vulnerable to ransomware or sabotage.

Passengers expressed frustration over poor communication:

  • “We haven’t been told anything except that there was a technical fault,” one traveller in Berlin said.

  • Another called it “inexplicable” that systems remain so easily disrupted.

Airlines responded unevenly: easyJet said operations were normal, Delta and United reported only minor delays, while Ryanair and British Airways did not immediately comment.

Authorities in Britain and Germany said cyber defence teams are working with airports to manage the fallout. The disruption adds to a year marked by high-profile hacks, including breaches at Jaguar Land Rover and UK retailers, fueling concern about escalating digital threats across industries.

Delta Air Lines Must Face Lawsuit Over Flight Disruptions After 2024 Computer Outage, Judge Rules

A federal judge ruled Tuesday that Delta Air Lines must face parts of a proposed class-action lawsuit filed by passengers who accused the airline of refusing full refunds after massive flight delays and cancellations caused by a computer outage in July 2024.

U.S. District Judge Mark Cohen in Atlanta allowed five of nine plaintiffs to move forward with breach of contract claims, citing Delta’s alleged failure to provide proper refunds. He also allowed a separate group of international travelers to pursue claims under the Montreal Convention, a global treaty covering air travel disruptions.

The outage, which began July 19, 2024, was triggered by a flawed software update from cybersecurity firm CrowdStrike, affecting over 8 million devices and causing significant disruptions to Microsoft clients, including major airlines. While many U.S. carriers resumed operations within a day, Delta’s systems remained down longer, resulting in about 7,000 canceled flights.

Judge Cohen dismissed several other claims, including those he said were preempted by federal law. Still, the ruling is being hailed by passengers’ attorneys as a victory for accountability.

This ruling is a major step forward for Delta passengers seeking accountability,” said Joseph Sauder, a lawyer representing some of the plaintiffs.

Passengers said Delta failed to issue automatic refunds and allegedly required travelers to waive legal claims in exchange for partial compensation.

  • One plaintiff, John Brennan of Florida, missed a $10,000 anniversary cruise after being stranded in Atlanta and was offered only $219.45.

  • Another, Vittorio Muzzi of the Netherlands, said his 5,000-euro trip was disrupted, his luggage delayed 15 days, and he received just €588 in compensation.

Delta, which had sought to dismiss most of the claims, has not responded publicly to the ruling. The airline previously estimated the outage cost $550 million in revenue losses and added expenses.

The case is Bajra et al v. Delta Air Lines, U.S. District Court, Northern District of Georgia, No. 24-03477.

CrowdStrike Seeks to Dismiss Delta Air Lines Lawsuit Over July Cybersecurity Outage

CrowdStrike has moved to dismiss a lawsuit filed by Delta Air Lines related to a July cybersecurity outage that resulted in canceled flights and stranded passengers. The cybersecurity company argues that the suit violates the terms of the contract between the two parties, including a clause that limits CrowdStrike’s liability and caps damages. In its filing, CrowdStrike emphasized that Georgia law prevents Delta from turning a breach of contract claim into tort claims, citing the state’s economic loss rule.

Delta claims that the July incident cost the airline more than $500 million in canceled flights, refunds, and accommodations for affected passengers. The airline is seeking to recover these costs from CrowdStrike, but the full extent of the damage, including reputational harm and the impact of a Department of Transportation investigation, has yet to be quantified. Despite the incident, Delta continues to use CrowdStrike’s cybersecurity services, likely due to the complexity of replacing such a provider in a large organization like Delta.

CrowdStrike contends that it acted swiftly to assist Delta during the outage, but the airline reportedly rejected offers of help. According to CrowdStrike, one message from a Delta executive stated, “We are good for now.” The company also argued that Delta’s internal systems and practices contributed to the scale of the delays and cancellations, with the airline experiencing far more significant disruptions than its industry peers, who recovered more quickly from similar issues.

The cybersecurity company’s stock was heavily impacted by the outage, dropping 44%, but it has since recovered, posting strong results despite lowering its guidance due to the incident. Delta has yet to provide a statement in response to the filing.