A ransomware attack against Collins Aerospace, a company that provides check-in systems to several airports in Europe, is still causing disruptions across the continent for the fourth day in a row.
As of this writing, according to FlightRadar24, a website that monitors air traffic live, London’s Heathrow airport has 90% of flights delayed, with an average delay of 29 minutes; Brussels airport has 88% of flights delayed, with an average delay of 43 minutes; Berlin Brandenburg airport has 94% of flights delayed, with an average delay of one hour; and Dublin airport has 91% of flights delayed with an average delay of 26 minutes.
Dublin airport’s spokesperson Graeme McQueen told TechCrunch in a statement that “there is no timeline at the current time for a fix to be implemented,” as airlines “continue to deploy manual workarounds while work continues to fix the IT issues that have been affecting check-in and boarding systems.”
Contact Us
Do you have more information about the ransomware attack against Collins Aerospace? We would love to learn more. From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or email. You also can contact TechCrunch via SecureDrop .
Brussel’s airport wrote on X that it is expecting “limited disruptions” on Tuesday and Wednesday. On its official website, the airport said “the service provider is actively working on the issue and trying to resolve the problem as quickly as possible. At the moment it is still unclear when the issue will be resolved.”
A warning on Berlin’s airport’s official website said “there are longer waiting times.”
Spokespeople for Heathrow, Brussels, and Berlin’s airports did not respond to a request for comment.
On Monday, European cybersecurity agency ENISA confirmed that the airport disruptions were due to a ransomware attack against Collins Aerospace.
Techcrunch event
San Francisco
|
October 27-29, 2025
RTX, the company that owns Collins Aerospace did not respond to a request for comment on the status of the recovery after the cyberattack.