Airport Cyberattack, Kmart Privacy Breach & Germany's €300B Cybersecurity Hit

Every day, we hand over tiny pieces of ourselves to technology, from our photos and data to even our routines. Most of the time, it feels harmless, almost invisible. Yet, ever so often, that trust is tested with risks that we don’t see coming.

This week, the world got a stark reminder of just how exposed we are. Keep reading to know!

It wasn’t bad weather causing problems for air travel in Europe and Russia over the weekend, but cyber-attacks. A series of digital disruptions hit European airports, highlighting just how exposed critical infrastructure is in today’s connected world.

In Russia, St. Petersburg’s Pulkovo Airport, the country’s second busiest airport, reported that its website had been hacked. While operations were not disrupted, the breach added to growing concerns about cyber risks in air travel.

A similar situation in Europe was far more disruptive. A cyberattack on MUSE software, developed by Collins Aerospace, hit check-in and boarding systems at several major airports, including London’s Heathrow, Berlin, Brussels, Dublin and Cork among those affected.


Officials also confirmed flight diversions and widespread delays. By mid-day Saturday, 29 flights had been cancelled at the three largest hubs, while Brussels Airport asked airlines to cut half their scheduled departures on Sunday to ease pressure.

RTX, Collins Aerospace’s parent company, acknowledged a “cyber-related disruption” but said the issue was confined to electronic check-in and baggage drop, adding that manual systems were helping to keep operations moving.

Still, passengers mentioned confusion and long waits, with the only information being passed on was that it was due to “a technical fault.”

Cybersecurity experts say the episode is another warning about the interdependence of global travel systems. “The impact of the incident highlighted the fragile and interdependent nature of the digital ecosystem underpinning air travel,” noted Rafe Pilling of Sophos.

From St. Petersburg to Heathrow, this weekend made one thing clear that airports are becoming prime targets of global cyber threats.

Well, the threat isn’t limited to travel; cyber-attacks are hitting businesses across the globe.

In Germany, the cost of cyberattacks over the past year reached nearly €300 billion ($355 billion), according to a survey from industry group Bitkom.

Ransomware was the main cause, locking company data until a ransom was paid. The survey found that 34% of companies were hit, up from 12% in 2022, and one in seven actually paid the ransom.

The survey of 1,002 companies also looked at who was behind the attacks. Nearly half traced them to Russia and China, while about a quarter pointed to other EU countries or the United States.

“The trail leads relatively clearly and unambiguously to the east, with two countries at the forefront: Russia and China,” said Ralf Wintergerst, Bitkom's head.

Germany’s domestic security service added to the concern, noting how the lines between cybercrime and state-led cyberespionage are increasingly blurred.

“Where appropriate, state actors tolerate the criminal activities of private groups and even exploit their capabilities,” said Sinan Selen, deputy head of Germany's BfV. He added that Iran and North Korea are also major sources of cyber-attacks.

This shows that cyber-attacks aren’t just an infrastructural headache anymore but a real threat that’s forcing businesses and governments to up their digital defenses.

It’s not just airports feeling the pressure, though; retailers are facing privacy scrutiny, too.

In Australia, leading retailer Kmart has come under scrutiny for using facial recognition technology without customer consent.

On Thursday, the Office of the Australian Information Commissioner (OAIC) said Kmart, owned by Wesfarmers, broke privacy laws by collecting personal and sensitive information using facial recognition to prevent refund fraud. The system captured details of every customer who entered 28 stores between June 2020 and July 2022.


Kmart said it didn’t need consent because the law allows collecting information to stop illegal activity. They kept images only if someone was suspected of refund fraud and deleted the rest. The company said it was ‘disappointed’ and might appeal.

Australian law treats facial images and other biometric data as highly sensitive, with Privacy Commissioner Carly Kind emphasizing, “Customer and staff safety, and fraud prevention and detection are legitimate reasons businesses might have regard to when considering the deployment of new technologies. However, these reasons are not...a free pass to avoid compliance with the Privacy Act.”

This is the second OAIC ruling on the use of facial recognition in retail, following a similar finding against Wesfarmers-owned Bunnings last year. The determinations serve as a clear signal to businesses: new technologies like facial recognition may help prevent fraud, but they cannot bypass legal obligations to protect customer privacy.

The case makes it clear that using facial recognition to prevent fraud doesn’t allow businesses to ignore privacy rules.

Have cyber threats evolved into a global menace despite improved technology? Can regulatory pressure encourage businesses to secure customers’ personal data?

Let us know your thoughts in the comments section below!