U.K. Police Arrest Man Over Cyberattack That Disrupted Airports

• Sep 24, 2025

A man in his 40s has been arrested in southern England after an alleged cyberattack caused serious disruptions at several European airports, including London Heathrow, officials confirmed on Wednesday.

The U.K.’s National Crime Agency (NCA) said the suspect was detained in West Sussex on Tuesday on suspicion of computer misuse offenses. He has since been released on conditional bail as investigations continue.

Paul Foster, head of the NCA’s national cybercrime unit, emphasized that while the arrest marked progress, the probe remains at an early stage. “Cybercrime is a persistent global threat that continues to cause significant disruption to the U.K.,” he said.

The attack began late Friday and continued through the weekend, affecting airports in Berlin, Brussels, and London. The cyber incident disrupted electronic check-in systems, forcing airline staff to switch to backup methods, including handwriting boarding passes and using spare laptops.

Berlin Airport issued a statement on Wednesday warning passengers to expect “further disruptions to flight operations.” Officials noted that check-in and boarding processes were still being handled manually, which could lead to longer wait times, flight delays, and possible cancellations. The airport’s system provider said restoring secure and fully functional software may take several more days, despite additional specialists being called in.

At London’s Heathrow Airport, authorities reported that by Tuesday the “vast majority” of flights were operating normally, with only limited impact remaining. Other major European airports were not affected by the cyber incident.

The disruptions were traced to systems operated by Collins Aerospace, a U.S.-based company that provides software to help airlines manage passenger check-in, boarding passes, baggage tags, and luggage dispatch. The company confirmed on Saturday that it experienced a “cyber-related disruption” at selected airports across Europe.

At this stage, officials have not determined who carried out the attack. Cybersecurity experts say potential culprits could include hackers, organized criminal groups, or even state actors.

Despite the widespread impact on passenger services, European Union officials confirmed that air traffic control and aviation safety systems were not compromised. The European Commission, the EU’s executive branch, said flights remained safe throughout the disruption.

The investigation continues as authorities work to understand the full scope of the cyberattack and prevent further disruption to European air travel.