Pro-Ukraine hackers disrupt Aeroflot's operations amid cyberattack

In July 2025, Russian airline Aeroflot faced significant operational disruptions following a major cyberattack attributed to two pro-Ukraine hacking groups. The attack crippled approximately 7,000 servers and compromised sensitive data related to passengers and employees, including the personal computers of staff members and senior managers. This cyber intrusion resulted in the cancellation of numerous flights from Moscow, impacting thousands of passengers and leading to chaos at airports. While Aeroflot managed to stabilize its flight schedule over time, the immediate effects of the attack drew ire from affected travelers and raised serious questions regarding the security of critical infrastructure within Russia. The Belarusian Cyber Partisans, known for their opposition to President Alexander Lukashenko, and a less-known hacking group called Silent Crow both claimed responsibility for the prolonged cyber operation against Aeroflot’s network. They reported that their actions were a strategic effort to disrupt Russian operations as part of the ongoing conflict. Their statement on Telegram declared the successful execution of their plans, escalating concerns for Russian authorities about the potential for future cyberattacks that could further destabilize the nation. The Kremlin's response to the incident included a statement describing the attack as 'worrying,' prompting Russian prosecutors to initiate a criminal investigation. Lawmakers in Russia indicated that the attack served as a wake-up call, emphasizing the need to understand how such vulnerabilities could exist within critical infrastructure and urging investigators to hold both the hackers and those responsible for security lapses accountable. This situation underscored the reality that the conflict between Russia and Ukraine extends beyond traditional battlefields and into digital arenas, necessitating heightened awareness and defensive strategies. As Aeroflot worked to recover from the attack, flight cancellations continued for a time, leading to cancellations of at least 59 round-trip flights from Moscow on the day of the attack. The company later communicated that a majority of its flights were operating according to the original schedule, indicating a rapid recovery process. However, the operational difficulties caused substantial passenger frustrations, illustrating the broader implications of cyber warfare in modern conflicts. The event highlighted not only the prowess of hacking groups but also the critical need for robust cybersecurity measures in safeguarding civilian and state operations alike.