"The hacker attack experienced by Aeroflot has been successfully resolved, restoring their flight schedule to normal."
In a significant disruption to air travel, Aeroflot, Russia's flag carrier airline, faced a cyberattack on its IT systems in July 2025. The attack caused a failure in the airline's information system, leading to the cancellation of more than 100 flights.
The General Prosecutor's Office of Russia launched a criminal investigation into the incident, identifying it as a hacker attack that caused the IT system failures. The disruption affected Aeroflot's operations both domestically and internationally, grounding aircraft and impacting flights to Belarus, Armenia, and Uzbekistan.
Two pro-Ukrainian hacker groups, Silent Crow and the Belarus Cyber-Partisans, claimed responsibility for the attack. This incident marked one of the most extensive cyberattacks on a Russian company since the start of Russia's full-scale invasion of Ukraine in 2022. Previously, Russian government and companies had experienced attacks but with shorter disruption periods.
The Prosecutor General’s office publicly confirmed the investigation and linked the flight cancellations directly to the cyberattack. However, as of July 2025, no further detailed procedural specifics of the investigation were disclosed. The case remains active in Russia following these events.
Despite the disruption, Aeroflot managed to restore its operational activity by July 30, according to reports by 360.ru. The regional network also operated at full capacity, with all 73 domestic flights proceeding according to schedule. However, approximately 50 flights from Moscow to various regions of the country, including Kuban, were canceled.
Passengers affected by the flight cancellations were transferred to flights of other airlines. The schedule included 73 domestic routes bypassing Moscow, with a total of 241 paired flights planned for departure from Moscow airports on July 30. However, the text does not provide any information about the rescheduling or completion of these flights.
The nature or source of the cyberattack, as well as the technical malfunction that Aeroflot warned about on July 28, remain undisclosed. This additional information was reported by Kuban 24. The text also does not provide any information about the impact of the cyberattack on Aeroflot's operations beyond July 29.
The General Prosecutor's Office of Russia attributed the July 2025 cyberattack on Aeroflot, a Russian airline, to a hacker attack and linked it directly to the flight cancellations that occurred. In the realm of technology, this incident notably falls under the umbrella of cybersecurity, signifying the growing risk of such attacks on critical infrastructure like air travel systems.
