RTX Suffers Ransomware Attack, Disrupting Airport Operations

Last Updated: September 26, 2025By

Ransomware Attack Hits Aviation Giant RTX

Recently, aerospace giant RTX, formerly Raytheon Technologies, found itself navigating through digital turbulence following a ransomware attack. The incident, first detected on September 19, has thrown their airport operations into disarray, forcing clients to revert to backup and manual systems. This shift inevitably led to flight delays and cancellations, a headache for travelers and airlines alike.

While the filed SEC documents don’t explicitly mention Collins Aerospace—a service provider for affected airport systems—there’s an acknowledgment of disruption in the MUSE software critical for check-in and baggage handling. Importantly, these systems are hosted on client-specific networks, insulating the core RTX network from the attack.

It’s noteworthy that RTX chose to air the specifics of a ransomware breach in their SEC submission, a level of transparency not always seen in corporate disclosures. Fortuitously, they haven’t reported any loss of personal or sensitive information, which is a relief for stakeholders.

Ongoing Investigation and Future Implications

As investigations deepen, RTX remains optimistic about its financial resilience, although some European airports continue facing operational hiccups. Remediation efforts are tangled in a web of recurring ransomware infections, which cybersecurity analysts trace back to a rare malware named HardBit. The HardBit ransomware, a lesser-known threat, specializes in encrypting vital data and operates on an affiliate model, broadening its reach and impact.

Efforts to pin down the culprits have seen developments, including the arrest of a suspect in the UK, though details are scant. Meanwhile, the aviation sector has seen similar disruptions, with Aeroflot recently suffering a breach impacting over 100 flights. The cyber skies are lively, and vigilance remains the order of the day.

Stay informed and cyber-safe with Qsentinel’s insights and updates.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.

Get daily news in your inbox

The lastest on Hacks, ransomware attacks, post quantum security and more