RTX Corp., the parent firm of Collins Aerospace, confirmed that ransomware was used in the hack of its airline passenger processing software, in a filing with federal regulators.
The attack, discovered on Sept. 19, has disrupted flights across Europe since last week, including at London’s Heathrow Airport, Brussels Airport, and airports in Berlin and Dublin.
The Multi-User System Environment software, known as MUSE, is used by multiple airlines to check-in and board passengers and is also used to track baggage, according to the filing with the U.S. Securities and Exchange Commission.
Virginia-based RTX said the MUSE system operates on a customer-specific network outside of the company’s enterprise network.
U.K. authorities said Wednesday that a man in his 40s had been arrested on suspicion of violating the Computer Misuse Act. The police investigation is ongoing.
RTX is working with a team of internal and third-party forensic experts to investigate the attack and has notified U.S. and international law enforcement agencies. The company has also notified government authorities about the incident.
The company said it notified customers about the attack and is providing technical support to airlines and airports affected.
The company noted that while the investigation is ongoing, it does not expect the attack to have a material impact on operations or its financial condition.
Heathrow said the vast majority of its flights are operating normally, but in a post on X it advised passengers to arrive three hours early for long-haul flights,
