Red Hot Cyber
Cybersecurity, Cybercrime News and Vulnerability Analysis
HackTheBox 970x120 1
Ransomware attack on European airports leaves Berlin in “emergency mode”

Ransomware attack on European airports leaves Berlin in “emergency mode”

26 September 2025 07:06

Berlin Airport (BER) remains in “emergency mode” for the fifth day after a major cyberattack on its supply chain. Der Spiegel reported the news in yesterday’s update.

IT services provider Collins Aerospace, a subsidiary of the American company RTX, was the victim of a cyberattack last Friday. The hack paralyzed the electronic systems used to process passengers and baggage.

According to an airport spokesperson, BER is still in “emergency mode” several days after the cyberattack on its IT system. The paralyzed passenger and baggage management system remains inactive.

He noted that on Thursday, September 25, there were again several delays and three flights were canceled. On Wednesday, however, 12 flights were canceled . Firefighters and ground staff continue to provide assistance with baggage handling.

As we reported on these pages , a massive cyber attack rocked several European airports on Saturday, September 20. On the morning of September 22, Brussels Airport asked airlines to cancel half of their scheduled departures for that day.

The identity of the cyber gang behind the cyber attack on the check-in operator has not yet been revealed. On the same day the airports were hit by a cyber attack, Dublin Airport was evacuated due to what appeared to be a hoax bomb threat.

The European Union Agency for Information Security (ENISA) later said that disruptions at airports affecting self-check-in systems in recent days were caused by a ransomware attack.

Follow us on Google News to receive daily updates on cybersecurity. Contact us if you would like to report news, insights or content for publication.

Cropped RHC 3d Transp2 1766828557 300x300
The Red Hot Cyber Editorial Team provides daily updates on bugs, data breaches, and global threats. Every piece of content is validated by our community of experts, including Pietro Melillo, Massimiliano Brolli, Sandro Sana, Olivia Terragni, and Stefano Gazzella. Through synergy with our industry-leading partners—such as Accenture, CrowdStrike, Trend Micro, and Fortinet—we transform technical complexity into collective awareness. We ensure information accuracy by analyzing primary sources and maintaining a rigorous technical peer-review process.