NCA arrest in RTX Collins Aerospace MUSE ransomware case
Law Enforcement
Summary
Hide ▲
Show ▼
The UK National Crime Agency arrested a man in his forties in West Sussex in connection with a ransomware attack on Collins Aerospace's MUSE passenger processing software. The arrest on suspicion of Computer Misuse Act offences matters because the intrusion has caused widespread disruptions at European airports. The suspect has been released on conditional bail while the investigation remains ongoing.
Related Happenings
RTX Corporation / Collins Aerospace hit by ransomware attack
Incident
H score25
First: 24.09.2025 16:55
Last: 24.09.2025 16:55
Sources 1
How related:
"RTX Corporation (formerly Raytheon Technologies), the owner of Collins Aerospace, which employs over 186,000 people worldwide and has reported revenues of over $80 billion last year, has confirmed that a MUSE ransomware attack is causing disruptions at European airports."
About this happening:
**RTX Corporation / Collins Aerospace** confirmed a **MUSE ransomware attack** that is disrupting **European airports** and causing **flight delays and cancellations**. The affect...
RTX Corporation / Collins Aerospace hit by ransomware attack
IncidentHow related: "RTX Corporation (formerly Raytheon Technologies), the owner of Collins Aerospace, which employs over 186,000 people worldwide and has reported revenues of over $80 billion last year, has confirmed that a MUSE ransomware attack is causing disruptions at European airports."
About this happening: **RTX Corporation / Collins Aerospace** confirmed a **MUSE ransomware attack** that is disrupting **European airports** and causing **flight delays and cancellations**. The affect...
Thalha Jubair and Owen Flowers Scattered Spider arrests and charges
Law Enforcement
H score36
First: 19.09.2025 10:05
Last: 19.09.2025 10:05
Sources 1
About this happening:
**Scattered Spider** members **Thalha Jubair** and **Owen Flowers** pleaded guilty in the **United Kingdom** over the **August 2024** cyberattack that **crippled Transport for Lon...
Thalha Jubair and Owen Flowers Scattered Spider arrests and charges
Law EnforcementAbout this happening: **Scattered Spider** members **Thalha Jubair** and **Owen Flowers** pleaded guilty in the **United Kingdom** over the **August 2024** cyberattack that **crippled Transport for Lon...
Transport for London (TfL) hit by cyberattack
Incident
H score49
First: 19.09.2025 10:05
Last: 19.09.2025 10:05
Sources 1
About this happening:
The **August 2024 cyber attack** on **Transport for London (TfL)** caused **significant disruption** and **£29m ($38m)** in loss and recovery costs. The intrusion affected the **c...
Transport for London (TfL) hit by cyberattack
IncidentAbout this happening: The **August 2024 cyber attack** on **Transport for London (TfL)** caused **significant disruption** and **£29m ($38m)** in loss and recovery costs. The intrusion affected the **c...
Owen Flowers and Thalha Jubair arrested and charged in Transport for London cybercrime case
Law Enforcement
H score36
First: 18.09.2025 17:37
Last: 18.09.2025 17:37
Sources 1
About this happening:
**UK authorities** and prosecutors advanced the **Transport for London** cybercrime case after **Thalha Jubair** and **Owen Flowers** pleaded guilty in the **United Kingdom** to c...
Owen Flowers and Thalha Jubair arrested and charged in Transport for London cybercrime case
Law EnforcementAbout this happening: **UK authorities** and prosecutors advanced the **Transport for London** cybercrime case after **Thalha Jubair** and **Owen Flowers** pleaded guilty in the **United Kingdom** to c...
Timeline
-
24.09.2025 16:55 1 articles · 9mo ago
RTX detects MUSE ransomware disruption
Detection Ioc UpdateRTX detects a ransomware incident affecting Collins Aerospace's Multi-User System Environment (MUSE) passenger processing software, and European airports begin experiencing flight delays and cancellations as check-in, gate, and baggage-handling operations are disrupted.
Show sources
- UK arrests suspect for RTX ransomware attack causing airport disruptions — www.bleepingcomputer.com — 24.09.2025 16:55
-
24.09.2025 16:55 2 articles · 9mo ago
NCA arrests suspect in West Sussex
Legal Policy Action UpdateThe UK's National Crime Agency arrests a man in his forties in West Sussex on suspicion of Computer Misuse Act offences in connection with the Collins Aerospace MUSE ransomware case, and the suspect is later released on conditional bail while the investigation remains ongoing.
Show sources
- UK arrests suspect for RTX ransomware attack causing airport disruptions — www.bleepingcomputer.com — 24.09.2025 16:55
- UK arrests suspect for RTX ransomware attack causing airport disruptions — www.bleepingcomputer.com — 24.09.2025 16:55
-
24.09.2025 16:55 1 articles · 9mo ago
RTX confirms airport disruption and response steps
Initial DisclosureRTX confirms that the MUSE ransomware incident is disrupting European airports, says the company activated its incident response plan, is working with internal and external cybersecurity experts, and has notified domestic and international law enforcement authorities and certain other government agencies.
Show sources
- UK arrests suspect for RTX ransomware attack causing airport disruptions — www.bleepingcomputer.com — 24.09.2025 16:55