Aeroflot's flight operations have been declared to be stable
On July 29, Aeroflot, Russia's flag carrier, managed to restore its flight schedule following a significant cyberattack the previous day. The attack, claimed by Ukrainian group Silent Crow and Belarusian Cyber Partisans, compromised Aeroflot's internal IT infrastructure, causing widespread flight cancellations and disruptions.
The hackers reportedly infiltrated Aeroflot's systems for about a year, destroying thousands of servers, stealing large amounts of data, and causing operational chaos. They claimed their motives were political and did not seek ransom, instead publicly releasing stolen data.
Aeroflot cancelled 108 flights (about 42%) on July 28, but managed to operate around 80% of its scheduled daily flights. The attack affected Aeroflot’s subsidiaries Rossiya and Pobeda as well, with many domestic flights and some international routes being cancelled or delayed.
In response to the attack, Russia’s General Prosecutor’s Office opened a criminal case for unauthorized access. The Ministry of Transport stated that Aeroflot has the capabilities to normalize the situation related to the hacker attack.
To keep passengers informed, Aeroflot strengthened its contact center to provide updates on cancelled flights. Flights between the capital and 22 Russian cities were cancelled due to the malfunction. However, by 10:00 on July 29, Aeroflot resumed its flight schedule, with 93% of Moscow-bound and return flights planned according to the initial schedule.
Despite the cyberattack, the regional part of Aeroflot's program was fully implemented. Passengers of cancelled flights can receive a refund, but only after Aeroflot's services are restored.
The aviation industry is taking additional measures to resolve the problem of canceled Aeroflot flights. This incident serves as a reminder of the increasing threat of cyberattacks on critical infrastructure and the need for continuous vigilance and robust cybersecurity measures.
[1] BBC News. (2021, July 29). Aeroflot resumes flights after cyberattack. https://www.bbc.com/news/world-europe-58154431
[2] TASS. (2021, July 29). Russia opens criminal case over Aeroflot cyberattack. https://tass.com/russia/1270606
[3] Reuters. (2021, July 29). Aeroflot resumes flights after cyberattack. https://www.reuters.com/business/aeroflot-resumes-flights-after-cyberattack-2021-07-29/
[4] The Guardian. (2021, July 29). Aeroflot resumes flights after cyberattack. https://www.theguardian.com/world/2021/jul/29/aeroflot-resumes-flights-after-cyberattack
[1] The cyberattack on Aeroflot, a major player in the aviation industry, underscores the importance of robust cybersecurity measures in the transportation sector, especially in finance and technology-dependent industries.
[2] The financial implications of the Aeroflot cyberattack extend beyond the airline itself, as the disruption of flights affected numerous businesses and individuals who rely on air travel for both personal and professional purposes.
[3] In an era where critical infrastructure is increasingly susceptible to cyberattacks, the incident serves as a stark reminder for the finance, technology, transportation, and cybersecurity industries to collaborate more closely to mitigate potential threats and protect against future disruptions.
[4] Amidst the recovery efforts, it is crucial for the aviation industry to examine the role of cybersecurity in its operational resilience, ensuring continuous operations and minimizing the impact of such attacks on both passengers and businesses.
