Cyberattack Cripples Aeroflot, Dozens of Flights Canceled

Aeroflot, Russia’s national flag carrier, was forced to cancel dozens of flights on July 28, 2025, following what officials have described as a large-scale cyberattack that severely disrupted the airline’s operations. The attack struck several core IT systems, causing widespread delays and chaos at Sheremetyevo International Airport (SVO), Aeroflot’s main hub, during one of the busiest travel periods of the year.

According to Russia’s state-run TASS news agency, the Prosecutor General’s Office confirmed that internal systems at Aeroflot had been disabled by hackers and that a criminal investigation was underway. In the wake of the disruption, hacker groups believed to be linked to Ukraine and Belarus posted statements online claiming responsibility for the breach.

The attackers claimed to have spent several months infiltrating Aeroflot’s systems, targeting key infrastructure such as reservation databases, customer relationship management platforms, and critical back-office software. They alleged that they had exfiltrated a significant amount of sensitive data, which they intend to share with third parties. Alarmingly, they also claimed to have obtained the personal password of Aeroflot’s CEO, which they say had not been changed since 2022.

Unverified reports suggest the cyberattack also impacted Aeroflot’s refueling systems, compounding operational difficulties and forcing the airline to ground several aircraft. Passengers attempting to board flights at Sheremetyevo faced confusion and delays, with little immediate support available.

Aeroflot issued a statement asking affected passengers to return home, explaining that it is temporarily unable to process rebookings or refunds due to system outages. The airline said alternative travel options or refunds will be made available within 10 days, once systems are restored.

The incident represents one of the most disruptive cyberattacks on a major airline in recent years and raises significant concerns about the cybersecurity resilience of critical aviation infrastructure. As investigations continue, officials have not ruled out further attacks or data leaks in the coming days.

Related News : https://airguide.info/?s=Aeroflot