Aeroflot cyberattack cripples Russian air travel: Who hacked Russia’s Aeroflot servers, grounding flights and causing mayhem – did a US-backed group sabotage the carrier?

According to reports, 42 to 49 flights affecting destinations such as Yekaterinburg, Kaliningrad, Grozny, Minsk and Yerevan were grounded. As long queues were formed, the departure boards turned red, and passengers were advised to leave the airport due to system -wide closure.
Pro -Ukrainian hackers take responsibility for closing
Shortly after the failure, the pro -Ukrainian hacker group Silent Crow claimed responsibility for attacking Cyber activists in cooperation with Cyber Partisans. They explained the operation as part of a wider digital attack against the Russian infrastructure in response to the ongoing conflict in Ukraine.
In a brave statement, the group claimed that they have been in Aeroflot’s internal network for more than a year:
- More compromised 7,000 servers
- Access to secret documents, including internal notes and flight recordings
- Extracted precision customer and transaction data
- Destroyed Core CT infrastructure To prevent healing
These allegations are still investigated independently, but the alleged violation scale has created serious concerns about Russia’s cyber security vulnerabilities.
Russian authorities confirm the cyber attack and launched a criminal investigation
The Russian Prosecutor’s Office confirmed that Aeroflot is due to unauthorized access to system failure. On the other hand, the authorities filed a criminal case under the responsibility of illegal access to computer information systems. The probe is handled by Russia’s cyber security and intelligence organizations. Kremlin spokesman Dmitry Peskov addressed the media by calling cyber violations as “deeply worried, and warned that state -affiliated companies have become increasingly target in cyber war connected to geopolitical tensions.
Passengers who leave without repayment or help in the middle of chaos
The system failure had a direct impact on customer service platforms, including Aeroflot’s ticketing, boarding and repayment processing. Many passengers were told that ticket meters could not cancel or process Rubooks.
Instead, travelers were instructed to the following:
- Leave the Shemetyevo Airport To avoid extreme crowds
- Come into contact with Aeroflot’s help line or re -booking agents Within the next 10 days
- To send Online Requests Repayment and Re -Planning or through original purchase channels
This left hundreds of disappointed passengers with children and trunks, trying to adjust their travel plans without support-Aeroflot’s weak crisis management infrastructure.
Hacker Group demands the destruction of the core systems of the airline
Silent Crow published a detailed description of the operation and claimed not only leaked, but also destroyed the entire server infrastructure, including Aeroflot’s SAP management systems, personnel planning and communication platforms.
They also made it almost impossible to recover data by claiming the deletion of critical internal files and encrypting backup systems. The screenshots shared by computer pirates – although its identity has not yet been verified – showed internal messages, flight manifestations and system diaries as proof of violation.
Cyber security analysts say this may be one of the most harmful cyber attacks in a commercial airline in recent years.
Wider cyber security effects in the middle of the Russian-Ukraine conflict
This attack is the latest attack on an increasing list of cyber events aimed at the Russian digital infrastructure, which is generally attributed to pro -Ukrainian digital resistance groups. Since 2022, Ukraine’s occupation, energy providers, railway services, government portals and even banks in Russia have been targeted.
Experts warn this:
- Russia The civil aviation sector is now an open target
- Hybrid war It now includes digital attacks to destabilize civil logistics
- International carriers may need to raise soon Airline Cyber Security Protocols
Cyberwarfare has become a new battlefield with its major fluctuation effects on public security, economic systems and global travel in the Russian-Ukraine conflict.
Aeroflot’s ongoing crisis and uncertain healing time schedule
Aeroflot said that technical experts are working at any time of the day to regain operations, but did not give a timeline for full recovery. Online services remained intermittently from the end of July 28.
Hacker allegations have not been officially accepted by the airline, but it is reported that internal investigations continue. Data violation reports and internal sabotage are still evaluated.
For now, travelers are advised to check Aeroflot’s official channels and airport announcements for updates. Delays and possible rolling cancellations can continue within the next few days.
The travelers should know that they should move forward
If you were affected by Aeroflot cancellations, what to do:
- Check your flight status Using alternative flight monitoring platforms
- Contact Aeroflot’s help line Or customer portal for repayments or re -book
- Store documentation Like tickets and receipts for reimbursement suitability
- Avoid going directly to the airport unless your flight is approved.
- Wait delays even after the service continues TEACHED OPERATIONS
Cyber attacks now pose a real threat to global air travel
The Aeroflot event underlines a new global reality: Airlines become high -valuable goals in geopolitical cyber conflicts. As Pandemik travel rebounds, it is more critical to ensure that the airline IT infrastructure is safe, unnecessary and flexible.
This last deterioration adds global pusing urgency for better cyber security protocols between aviation networks, especially in regions affected by military conflicts.
FAQ:
Quarter. What caused Aeroflot to cancel the flights on July 28?
A cyber attack caused Aeroflot’s internal IT systems to cancel more than 40 flights.
S2. Who hacked Aeroflot’s systems in 2025?
A pro -Ukrainian hacker group called Silent Crow assumed the responsibility of the Aeroflot cyber attack.


