Today’s aviation industry is a vast digital network where cybersecurity has become as vital as fuel management and flight control systems. With digital systems becoming the backbone of operations from booking tickets, baggage handling to in-flight diagnostics, the industry faces escalating risks of cyber threats. A single cyber breach, whether targeting an airline, airport, or a third-party service provider can disrupt safety, delay operations, or compromise sensitive passenger data.
As the industry continues to digitise, the importance of robust cybersecurity measures has never been more critical. In response, the Federal Aviation Administration (FAA) recently proposed new regulations aimed at enhancing cybersecurity for transport category aircraft. The rules are designed to safeguard systems including engines, and propellers from intentional unauthorised electronic interactions (IUEIs) that could impact flight safety.
Why Cybersecurity Matters in Aviation
Aviation is not just about transporting people and goods, it’s about trust, safety and global connectivity. A single cyberattack can ground fleets, compromise passenger data, or even endanger lives. The interconnected nature of aviation systems spanning airlines, airports, air traffic control, and third-party vendors creates a vast attack surface. As such, cybersecurity is no longer a back-office IT concern; it is a frontline defence for operational integrity and public safety.
Cyberattacks on the Rise
Cyberattacks in aviation are far from new. Let us look at some of the recent cyber incidents that shook the industry.
WestJet Cyberattack (June 2025)
Canada’s second-largest airline, WestJet, experienced a cybersecurity incident that disrupted access to its website and mobile app. While flight operations remained unaffected, the breach raised concerns about customer data exposure and the vulnerability of internal systems.
Hawaiian Airlines Cyberattack (June 2025)
Hawaiian Airlines disclosed a significant cybersecurity incident that disrupted portions of its IT infrastructure. While the airline confirmed that flight operations remained unaffected, the breach raised concerns about data security and the growing threat landscape facing the aviation sector.
Cybersecurity analysts and federal agencies suspect the involvement of the hacking group Scattered Spider (also known as UNC3944), known for sophisticated social engineering attacks. The group has recently shifted its focus to the aviation sector, with similar attacks reported against WestJet and Qantas.
Seattle Tacoma International Airport Cyber Attack (August 2024)
Seattle-Tacoma International Airport (SEA) was targeted by a ransomware attack attributed to the criminal group Rhysida, causing widespread disruption across airport systems. The cyberattack disabled key infrastructure, including baggage handling, check-in kiosks, flight information displays, Wi-Fi, and the airport’s website and mobile app.
Although flight operations continued with minimal cancellations, over 400 delays were reported, and manual processes had to be implemented for ticketing and passenger information.
Digital Dependencies in Aviation Operations
In July 2024, Delta Airlines experienced widespread IT disruption due to a third-party software update error. The incident led to flight cancellations and customer compensation, resulting in significate losses. While not a cybersecurity breach, the event underscored how tightly aviation operations are coupled with third-party IT systems and the cascading operational risk this can create.
In 2024, the Los Angeles International Airport website was taken offline by a DDoS attack. In 2021, a breach at SITA affected frequent flyer data of Star Alliance and OneWorld passengers. The 2018 Cathay Pacific breach exposed data of over 9 million passengers.
These incidents are part of a worrying trend. Cyberattacks on aviation systems have surged by 74% since 2020, according to U.S. Senator Maria Cantwell.
With aviation contributing over $1.9 trillion to the U.S. economy and supporting 11 million jobs, this is a national priority. A 2024 report on aviation cybersecurity rated the industry at a “B” level. Companies in this bracket are nearly three times more likely to experience data breaches than those with an “A” rating.
Ransomware remains a serious threat. In the past year, 55% of civil aviation cybersecurity leaders reported ransomware incidents. The consequences were significant as 38% faced operational disruptions, and 41% lost data.
Aircraft as Data Hubs
The modern aircraft have become a critical part of the cybersecurity puzzle. Every plane in flight continuously transmits a stream of data including location, maintenance alerts, engine performance through interconnected digital systems. Every data exchange transfer presents an opportunity for cyber threats. Even the onboard components such as the Wi-Fi router, can become vulnerabilities if not properly secured with updated credentials and protocols.
In response to these evolving risks, the FAA’s proposed new rules target these growing vulnerabilities. As aircraft systems become increasingly reliant on digital connectivity from cockpit avionics to ground-based maintenance interfaces, the threats can emerge from unexpected sources which expand in both scope and intensity. The highly interconnected design of today’s aircraft demands for a standardised, industry-wide cybersecurity framework.
FAA’s proposed rules – to date, the FAA has issued temporary, case-specific cybersecurity conditions. These “special conditions” were often inconsistent and time-consuming. The new proposal aims to streamline the process by setting unified criteria for all new certifications.
Under the new rules, manufacturers must:
-
Identify all cyber threats and assess the risk to system architecture.
-
Analyse the likelihood of exploitation.
-
Mitigate vulnerabilities with security layers or procedural safeguards.
This move is expected to reduce certification times and costs, enabling quicker market entry for new aircraft systems while enhancing safety.
Impact of Cybersecurity on Passenger Safety
Cybersecurity plays a critical role in ensuring passenger safety in modern aviation, where digital systems are deeply embedded in nearly every aspect of flight operations. A single cyberattack can ground fleets, compromise passenger data, or even endanger lives. Here’s how it directly impacts passenger safety:
Aircraft Systems Protection: Modern aircraft rely on interconnected avionics systems for navigation, communication, engine control, and more. If these systems are compromised by cyberattacks such as unauthorised access or manipulation, it could interfere with flight controls or mislead pilots, potentially endangering lives.
Data Integrity and Communication: Secure transmission of flight data between aircraft, ground stations, and air traffic control is essential. A cyber breach could distort or delay crucial communications, leading to confusion or unsafe flight paths.
Passenger Information and Services: While not directly affecting the aircraft’s operation, breaches in airline booking systems or airport infrastructure can compromise passenger data, disrupt boarding processes, or even ground flights, creating cascading safety challenges.
Supply Chain Vulnerabilities: Airlines and airports often rely on third-party vendors for software, maintenance, and services. Weak cybersecurity in these links can create hidden entry points for attackers, indirectly jeopardising flight and passenger safety.
Impacts Across the Industry
While the proposed rules target the new products, their ripple effects will extend across the broader ecosystem including airlines, airports, and technology vendors. To align with the evolving standards, organisations will need stronger security assessments, updated protocols, and staff training to meet future demands.
There may also be implications for passengers. Stronger cybersecurity could mean fewer delays from IT disruptions. However, the cost of compliance may raise operational expenses, potentially impacting ticket prices. In an industry where trust and safety are paramount, the long-term value of robust cybersecurity far outweighs the short-term challenges of implementation.
Strategies to Strengthen Aviation Cybersecurity
Addressing cyber threats in aviation is not just about compliance—it’s about resilience. To counter these evolving threats, the aviation industry must adopt a multi-layered cybersecurity approach and invest in modern solutions like:
Zero Trust Architecture
Assume every user, device, and application is a potential threat. Implement strict identity verification, micro-segmentation, and continuous monitoring to limit lateral movement within networks.
AI-based Threat Detection
Deploy AI-driven monitoring tools that can detect anomalies across IT and operational technology (OT) systems. Early detection is key to preventing widespread disruption.
Cybersecurity Culture and Training
Human error remains a major vulnerability. Regular training, phishing simulations, and a culture of cyber awareness can significantly reduce risk.
Supply Chain Security
Supply chains also pose unique risks. Vet third-party vendors rigorously and ensure they comply with cybersecurity standards. So that external dependencies cannot become internal threats.
Regular Patch Management
Software used in aircraft systems, ground control, and maintenance tools often contain exploitable flaws. Timely patching ensures these vulnerabilities are addressed before they can be leveraged by malicious actors.
International Collaboration and Regulation
Frameworks like the ICAO Aviation Cybersecurity Strategy and IATA’s guidance materials promote global standards, information sharing, and coordinated responses to cyber incidents.
As aviation becomes more digitised, cybersecurity can no longer be treated as an afterthought. The FAA’s proposed rules mark an important pivot towards a standardised, future-ready cybersecurity approach.
But for the skies to truly remain safe, every stakeholder in the aviation ecosystem must adopt cybersecurity as a core strategic priority. This commitment is essential not only to safeguard systems and data, but to uphold the trust and safety of passengers and the integrity of global aviation.
The author is Vice President – International Sales at Array Networks. Views are personal.
