❓WHAT HAPPENED: A man in his forties was arrested in southern England for an alleged cyberattack that disrupted several European airports, including London Heathrow.
👤WHO WAS INVOLVED: The suspect, Britain’s National Crime Agency (NCA), Collins Aerospace, and European airports, including Berlin, Brussels, and London Heathrow.
📍WHEN & WHERE: Starting late on the evening of September 19 through the weekend, with the arrest occurring in West Sussex, England, on September 23.
💬KEY QUOTE: “Although this arrest is a positive step, the investigation into this incident is in its early stages and remains ongoing.” – Paul Foster, head of the NCA’s national cybercrime unit.
🎯IMPACT: Disruptions to electronic systems caused delays, cancellations, and manual check-ins at affected airports, with some operations still not fully restored.
A man in his forties has been arrested in West Sussex, England, in connection with a cyberattack that disrupted operations at several major European airports, including London Heathrow. The incident, which began late Friday, caused widespread delays and forced airport staff in multiple cities to switch to manual check-in systems and issue handwritten boarding passes. Britain’s National Crime Agency (NCA) confirmed the arrest, adding that the suspect has been released on conditional bail while investigations continue.
Paul Foster, head of the NCA’s national cybercrime unit, said, “Although this arrest is a positive step, the investigation into this incident is in its early stages and remains ongoing. Cybercrime is a persistent global threat that continues to cause significant disruption to the UK.”
Airports in the German capital of Berlin, the Belgian capital of Brussels, and London were among those impacted, with Berlin Airport reporting ongoing delays. “Check-in and boarding are still largely manual,” the airport said, warning that it may take several days before operations fully return to normal.
The disruption has been traced to systems managed by Collins Aerospace, a U.S.-based aviation technology provider. The company confirmed a “cyber-related disruption” affecting select European airports and said it is working with additional specialists to restore full functionality. However, no estimated timeline for complete service restoration has been provided.
Cyberattacks targeting critical infrastructure have become increasingly common, with many governments blaming foreign state actors. Earlier this year, France accused Russian military intelligence of orchestrating a series of cyber operations against French institutions, including government bodies and private firms. In a separate case, Chinese hackers reportedly exploited a vulnerability in Microsoft software to breach systems at a U.S. nuclear agency.
Join Pulse+ to comment below, and receive exclusive e-mail analyses.