New Report Finds the Aviation Industry is Losing Millions of Dollars to Cyber Attacks

Aviation organizations have lost an average of $1.4 million to cybersecurity breaches over the past 12 months, according to new research from cybersecurity experts at Bridewell.

With tougher industry regulations and fast-moving requirements, those working within the industry are continuously facing high pressure.

A survey commissioned by Bridewell of 250 cybersecurity professionals working within the aviation industry found that phishing is the most prominent attack type, with 90 percent of respondents reporting they’ve experienced this type of attack in the past 12 months.

This trend is reflected in a recent report revealing Iran-linked hackers Screening Serpens are targeting key industries, including aviation, with highly personalized phishing attacks and malware.

Malware, credential theft, and DDoS attacks are also among the most common, with 88 percent of respondents experiencing at least one incident in the past 12 months.

For businesses, the impact of these attacks can be significant. Over 40 percent (41.2%) of respondents reported losses between $500,000 and $999,999, and close to a third (30.8%) of respondents reported losses between $1 million and $4.9 million.

The aviation industry's reliance on third-party suppliers means it’s not just airlines and airports facing these pressures, but also their suppliers and manufacturers. In fact, 60 percent of respondents revealed they are extremely concerned about cyber threats to airport operational infrastructure and supply chain partners.

Concerns about these cyber threats have prompted increased spending. Over three-quarters of respondents have reported escalating cybersecurity budgets in the current fiscal year. Almost 45 percent (44.8%) of respondents reported that budgets increased between 1 and 10 percent in the past fiscal year.

However, despite increases to budgets, organizations are admitting struggles around hiring cybersecurity professionals with the relevant skills. Hiring experts in AI and machine learning security is the number one challenge with 40 percent of organizations reporting this, followed by difficulties finding professionals with aviation-specific regulatory expertise (39.6%).

Kelechi Onyedebelu, Director Security Solutions Presales at Bridewell, commented on the findings

“The aviation industry has changed dramatically over the past two decades, and it’s now fundamentally dependent on interconnected digital systems.

“Airlines, airports, manufacturers, and suppliers now all operate on interconnected technologies, so cyber resilience cannot be achieved by individual organizations working in isolation.  

“We commissioned this research to get a first-hand account of what cybersecurity professionals in the aviation industry are experiencing, what they’re investing in and changes in their priorities.  

“What we’re seeing is that the aviation industry is under sustained pressure and experiencing significant financial losses as a result. At the same time, organizations are also having to balance immediate threats with longer-term concerns around skills shortages, changing regulations, and emerging technologies. 

“As artificial intelligence, automation, and increasingly connected infrastructure continue to reshape aviation, understanding the industry’s cyber maturity is essential.”

For full findings from the report, click here.