EU Cyber Agency Says Airport Software Held to Ransom by Criminals, Disrupting Operations Across Europe
In a coordinated cyber attack on Friday, several of Europe's busiest airports were disrupted after their automatic check-in and boarding software was compromised by malicious ransomware. According to the European Union Agency for Cybersecurity (ENISA), the type of ransomware used has been identified, and law enforcement is involved in investigating the incident.
The affected airports have spent the past few days trying to restore normal operations, with some still experiencing disruptions on Monday. ENISA told the BBC that the malicious software was used to scramble automatic check-in systems, causing chaos for travelers. "The type of ransomware has been identified," an ENISA spokesperson said. "Law enforcement is involved to investigate."
Several European airports were impacted by the attack, including those in major hubs such as London, Paris, and Amsterdam. The disruption caused significant delays and cancellations, with many passengers left stranded or forced to rebook their flights.
According to Joe Tidy, a cyber correspondent for the BBC, this type of ransomware is commonly used by cybercriminals to extort money from organizations in exchange for restoring access to their systems. "This is not an isolated incident," Tidy said. "We've seen similar attacks on hospitals, schools, and other critical infrastructure."
ENISA has been working closely with law enforcement agencies to investigate the attack and identify those responsible. The agency's director, Juhan Ertilä, emphasized the importance of cybersecurity in protecting critical infrastructure. "This incident highlights the need for robust cybersecurity measures to prevent such attacks," Ertilä said.
As the investigation continues, airports are taking steps to recover from the disruption. Some have implemented manual check-in systems, while others are working with IT experts to restore their automated systems. The affected airports have also issued apologies and assurances that they are doing everything possible to minimize the impact on travelers.
In the aftermath of the attack, cybersecurity experts are warning organizations about the risks of ransomware attacks. "This is a wake-up call for all organizations," said Dr. Emma Wilson, a cybersecurity expert at the University of Oxford. "They need to take proactive measures to protect themselves against these types of attacks."
The current status of the affected airports is unclear, but ENISA has assured that they are working closely with law enforcement and airport authorities to resolve the issue as quickly as possible.
As the investigation continues, one thing is clear: the cyber attack on Europe's busiest airports serves as a stark reminder of the growing threat of ransomware attacks on critical infrastructure.
This story was compiled from reports by BBC World, BBC Technology and BBC Business.
