Find notable cyber news and cases, enriched with sources, timelines, and signals.

NCA arrest in RTX Collins Aerospace MUSE ransomware case

Law Enforcement
First reported
Last updated
Happening score
H score 15
1 unique sources, 1 articles

Summary

Hide ▲

The UK National Crime Agency arrested a man in his forties in West Sussex in connection with a ransomware attack on Collins Aerospace's MUSE passenger processing software. The arrest on suspicion of Computer Misuse Act offences matters because the intrusion has caused widespread disruptions at European airports. The suspect has been released on conditional bail while the investigation remains ongoing.

Related Happenings

RTX Corporation / Collins Aerospace hit by ransomware attack

Incident
First: 24.09.2025 16:55 Last: 24.09.2025 16:55 Sources 1

How related: "RTX Corporation (formerly Raytheon Technologies), the owner of Collins Aerospace, which employs over 186,000 people worldwide and has reported revenues of over $80 billion last year, has confirmed that a MUSE ransomware attack is causing disruptions at European airports."

About this happening: **RTX Corporation / Collins Aerospace** confirmed a **MUSE ransomware attack** that is disrupting **European airports** and causing **flight delays and cancellations**. The affect...

Thalha Jubair and Owen Flowers Scattered Spider arrests and charges

Law Enforcement
First: 19.09.2025 10:05 Last: 19.09.2025 10:05 Sources 1

About this happening: The **U.K. National Crime Agency** arrested **Thalha Jubair** and **Owen Flowers** in connection with the **August 2024 Transport for London** cyberattack, while the **U.S. Depart...

Transport for London (TfL) hit by cyberattack

Incident
First: 19.09.2025 10:05 Last: 19.09.2025 10:05 Sources 1

About this happening: The **August 2024 cyber attack** on **Transport for London (TfL)** caused **significant disruption** and **millions in losses**, affecting a **critical national infrastructure** o...

Owen Flowers and Thalha Jubair arrested and charged in Transport for London cybercrime case

Law Enforcement
First: 18.09.2025 17:37 Last: 18.09.2025 17:37 Sources 1

About this happening: **UK authorities** arrested **Owen Flowers** and **Thalha Jubair** over the **August 2024 Transport for London** cyberattack, while **U.S. prosecutors** separately charged Jubair...

Timeline

  1. 24.09.2025 16:55 1 articles · 8mo ago

    RTX detects MUSE ransomware disruption

    Detection Ioc Update

    RTX detects a ransomware incident affecting Collins Aerospace's Multi-User System Environment (MUSE) passenger processing software, and European airports begin experiencing flight delays and cancellations as check-in, gate, and baggage-handling operations are disrupted.

    Show sources
  2. 24.09.2025 16:55 2 articles · 8mo ago

    NCA arrests suspect in West Sussex

    Legal Policy Action Update

    The UK's National Crime Agency arrests a man in his forties in West Sussex on suspicion of Computer Misuse Act offences in connection with the Collins Aerospace MUSE ransomware case, and the suspect is later released on conditional bail while the investigation remains ongoing.

    Show sources
  3. 24.09.2025 16:55 1 articles · 8mo ago

    RTX confirms airport disruption and response steps

    Initial Disclosure

    RTX confirms that the MUSE ransomware incident is disrupting European airports, says the company activated its incident response plan, is working with internal and external cybersecurity experts, and has notified domestic and international law enforcement authorities and certain other government agencies.

    Show sources