Sign in Subscribe
Airports

Aviation Industry Under Threat: Hackers Target Airlines

Strategic Insights

— 1 min read

The aviation industry is facing a new threat in the form of sophisticated hackers, who have been targeting airlines and airports in recent weeks. The secretive group "Scattered Spider," responsible for high-profile attacks on M&S and Co-op, has announced its intention to target the aviation sector. Experts warn that the attacks could disrupt flight operations, compromise passenger data, and even infiltrate in-flight systems.

Key Takeaways:

  • Airlines have been warned about the potential for sustained and relentless hacking attacks from Scattered Spider, which could disrupt flight operations and compromise passenger data.
  • The group has a history of targeting corporate infrastructure, with 380,000 British Airways customers having their credit card details stolen in a major data breach in 2018.
  • Ground systems could also be targeted, with the US Federal Aviation Administration's (FAA) NOTAM system suffering a three-hour outage in 2023, grounding all flights across the US.
  • In-flight systems could be infiltrated, posing a significant risk to passenger safety, as seen in an incident earlier this year where several aircraft received false mid-air collision warnings.
  • The potential impact of a hack on the aviation industry is significant, with experts warning that a sustained hacking attempt could extort an airline and disrupt passenger travel plans.
  • The aviation industry has taken steps to improve its cybersecurity, with airlines and airports investing heavily in IT systems and security measures.
  • Passengers can take steps to protect themselves from cyber attacks, including paying for holidays with credit cards, regularly changing passwords, and avoiding booking tickets on public Wi-Fi networks.

Statistics:

  • The aviation industry spent $37bn (£27bn) on IT systems in 2024, with airports spending $9bn (£6.5bn).
  • Around half of airlines and three quarters of airports are in the process of safeguarding data and upgrading IT systems.
  • The UK Civil Aviation Authority (CAA) warned industry contacts about Scattered Spider and the techniques they use.
  • In 2023, the US FAA's NOTAM system suffered a three-hour outage, grounding all flights across the US.

Sources:

  • Charles Carmakal, executive at Google's cybersecurity unit
  • Sam Rubin, of Palo Alto Networks
  • Matt Saunders, of Adaptavist
  • Jordan Avnaim, of identity security company Entrust
  • The Telegraph
  • UK Civil Aviation Authority (CAA)

Read more