European airports struggle to fix check-in glitch after cyberattack

A cyberattack targeting Collins Aerospace's (RTX.N) MUSE check-in software on Friday caused significant operational disruptions across major European airports. Brussels Airport, facing persistent issues and lacking a secure software update, requested airlines cancel 50% of Monday's departures after numerous cancellations over the weekend. While London Heathrow and Berlin Airport largely restored operations with manual workarounds, the incident underscores the escalating vulnerability of critical infrastructure to cyber threats and the supply chain risks associated with essential technology providers.

Analysis

A targeted cyberattack on the MUSE check-in software, provided by RTX subsidiary Collins Aerospace, has caused significant operational disruptions at major European airports. The impact is most severe at Brussels Airport, which, citing the lack of a secure software update from Collins, requested airlines cancel 50% of Monday's departures following the cancellation of 50 flights on Sunday and 25 on Saturday. While London Heathrow and Berlin Brandenburg Airport have mitigated the disruption with manual workarounds, experiencing what data provider Cirium describes as "low" and "moderate" delays respectively, the incident exposes a critical vulnerability in the aviation industry's reliance on third-party technology providers. The failure of RTX's subsidiary to deliver a prompt and secure resolution highlights a significant operational and reputational risk for the parent company, echoing broader trends of cyber threats impacting critical infrastructure sectors.

Key Decisions for Investors

• Investors in RTX should monitor for any company disclosures regarding the financial impact of the service disruption, including remediation costs and potential compensation claims from affected airports, as this could present a near-term earnings headwind.
• The event serves as a material example of supply chain risk within the aviation sector; it may be prudent to review portfolio exposure to companies heavily dependent on single-source, mission-critical software and consider the strengthening investment case for cybersecurity firms specializing in industrial and infrastructure protection.
• A key consideration is whether this hack is a one-off event or indicative of deeper security flaws in Collins Aerospace's product suite, which could affect its long-term contract value and competitive standing.