Aviation Industry Under Threat: Hackers Target Airlines

Strategic Insights -

As airlines and airports prepare for the peak summer travel season, the threat of cyber attacks has reached new heights. The secretive hacking group "Scattered Spider" has been identified as a major antagonist, targeting the aviation industry and causing disruptions to systems and services. Despite recent incidents, including cyber attacks on Hawaiian Airlines and Canada's WestJet, neither airline suffered operational disruption, and experts reassure that safety-critical IT systems have manual backup options maintaining the highest safety standards.

Key Takeaways:

  • Scattered Spider, a secretive hacking group, has been identified as a threat to the aviation industry, with multiple incidents reported in the airline and transportation sector.
  • Hawaiian Airlines and Canada's WestJet have recently suffered cyber attacks, but neither airline experienced operational disruptions due to the breach.
  • The UK Civil Aviation Authority has warned its industry contacts about Scattered Spider and the techniques they use, stating that when the group targets an industry, the attack tends to be sustained and relentless for a period.
  • Experts suggest that passengers can take steps to protect themselves from cyber attacks, including paying for holidays with credit cards, regularly changing account passwords, and avoiding booking tickets on public Wi-Fi networks.
  • The aviation industry has invested heavily in IT systems, with spends reaching $37bn (PS27bn) in 2024 alone, and airports spending $9bn (PS6.5bn).
  • Around half of airlines and three quarters of airports are in the process of safeguarding data and upgrading IT systems to improve security.

Statistics:

  • The aviation industry spent $37bn (PS27bn) on IT systems in 2024 alone.
  • Airports spent $9bn (PS6.5bn) on IT systems in 2024.
  • Around half of airlines and three quarters of airports are safeguarding data and upgrading IT systems.
  • Scattered Spider has targeted multiple incidents in the airline and transportation sector.

Sources:

  • "[Aviation] Five steps to hack-proof your holiday" by Telegraph Travel (no date mentioned in the original text).
  • Interview with Charles Carmakal, an executive at Google's cybersecurity unit, as reported by Google.
  • Interview with Sam Rubin, of Palo Alto Networks, as reported by Palo Alto Networks.
  • Statement by WestJet, as reported by the UK Civil Aviation Authority.
  • Statement by the UK Civil Aviation Authority, as reported by Telegraph Travel.
  • Information from Adaptavist, a tech consultancy which works with major airlines.
  • Statistics on aviation industry IT spending, as reported by industry sources.