RTX Corp

The ransomware hit Collins Aerospace's MUSE platform, the shared check-in backbone that roughly 170 airports rent instead of running their own, so a single intrusion grounded Heathrow, Brussels, and Berlin at once. Access came through the vMUSE backend's FTP credentials, harvested by an earlier infostealer and never rotated: a legacy file transfer left standing as the door to the passenger layer. Everest claims a 50GB haul of more than 1.5 million passenger records; the airports had not built a hundred systems to breach, only one.