Quantcast

Aeroflot hit by cyberattack linked to pro-Ukrainian groups causing widespread flight disruptions

Aeroflot hit by cyberattack linked to pro-Ukrainian groups causing widespread flight disruptions
Policy
Webp aeroflot
Aeroflot | Wikipedia

Russian airline Aeroflot reported significant flight disruptions on Monday, July 28, due to a failure in its information systems. The company announced via Telegram that the incident was causing delays and cancellations, with teams working to restore normal operations.

Shortly after the announcement, a pro-Ukraine hacker group known as Silent Crow claimed responsibility for the outage. The group stated on Telegram that they had planned the cyberattack for over a year and collaborated with Belarusian hacktivist group Cyber Partisans. Russian authorities have confirmed that a hack occurred and have opened a criminal investigation.

Silent Crow described the attack as a "large-scale operation" that resulted in the destruction of Aeroflot’s internal IT infrastructure. According to their statement, about 7,000 physical and virtual servers were destroyed along with databases, employee computers, and corporate systems. They also said they accessed critical platforms used by Aeroflot such as SharePoint, Exchange, CRM, and 1C.

Get the Newsletter
Sign-up to receive weekly round up of news from Sky Industry News
By submitting, you agree to our Privacy Policy and Terms of Service. By providing your phone number you are opting in and consenting to receive recurring SMS/MMS messages, including automated texts, to that number from our short code. Msg & data rates may apply. Reply HELP for help, STOP to end. SMS opt-in will not be sold, rented, or shared.

The group further claimed to have stolen over 12 terabytes of surveillance recordings and wiretapped data from internal communications. They threatened to release personal data belonging to Aeroflot passengers. In their statement published on Telegram, Silent Crow said:

“All these resources are now inaccessible or destroyed; restoration will require, possibly, tens of millions of dollars. The damage is strategic...Recovery will take a lot of time. Most of the data for Aeroflot is lost forever.”

Aeroflot has not officially confirmed being targeted by a cyberattack but acknowledged in its Telegram post: “There was a failure in the operation of the airline’s information systems. There may be interruptions in the work of services.” The airline reported that approximately 52 flights had been canceled.

Canceled flights included major domestic routes between Moscow and cities such as Yekaterinburg, Kaliningrad, Sochi, and St. Petersburg, as well as international services to Minsk and Yerevan. Passengers were advised to monitor airport departure boards for updates.

“Currently, the team of specialists is working to minimize the risks of the implementation of the flight plan and restore the regular operation of the services as soon as possible,” Aeroflot stated. Affected travelers were offered refunds or rebooking within ten days; however, ticket counters at airports were temporarily unable to process changes.

Kremlin spokesperson Dmitry Peskov called the incident “quite alarming.” The Russian Prosecutor General’s Office confirmed that Aeroflot’s system failure was due to a cyberattack and announced that an investigation was underway.

Russia’s aviation sector has faced repeated disruptions in recent years due mainly to Ukrainian drone activity. Moscow Sheremetyevo International Airport—Aeroflot’s main hub—has often suspended runway operations because of potential drone threats. Earlier this month coordinated drone strikes caused mass cancellations across Moscow’s major airports affecting both domestic and international flights.

Despite ongoing challenges from these disruptions affecting airspace around Moscow and broader Russian carriers including Aeroflot itself, Aeroflot remains one of Russia's largest airlines by passenger numbers—ranking among the top 20 global airlines last year with about 55.3 million passengers carried worldwide.

According to ch-aviation data (https://www.ch-aviation.com/), Aeroflot operates more than 200 aircraft comprising various models such as Airbus A319s (some wet leased), A320-200s (including those operated by Rossiya), A320neos, A321s/A321neos, A330-300s, A350-900s as well as Boeing 737-800s and Boeing 777-300ERs.

Organizations Included in this History
More News

Amazon has announced that its KSBD Air Hub in San Bernardino recognized its September High Flyers for their outstanding commitment to the company's 16 Leadership Principles.

Oct 28, 2025

Amazon announced that employees at its KSBD Air Hub in San Bernardino participated in the 2025 Pink on Parade for Breast Cancer Awareness Month.

Oct 28, 2025

The ShebaMiles loyalty program, operated by Ethiopian Airlines for over 26 years, has more than 5.38 million members and offers four membership tiers: Blue, Silver, Gold, and Platinum.

Oct 28, 2025

Long Beach Airport has entered into a 30-year lease agreement with JetZero, Inc., a company focused on next-generation aircraft design.

Oct 28, 2025

Passengers planning summer travel for 2026 can now book flights with Lufthansa Group Airlines, which has released its schedule featuring new destinations and increased frequencies.

Oct 28, 2025

Flying Food Group, Inc. has announced its Employees of the Month at its LAV facility.

Oct 28, 2025