Cyber attack on Japan Airlines: A wake-up call for aviation security

In a challenging start of the day, a cyberattack significantly disrupted the operations of Japan’s largest airline, Japan Airlines. At 7:24 AM on Thursday, cyber attackers targeted the airline’s internal and external systems. This led to a series of malfunctions that ultimately stopped ticket sales for flights departing that day. The cyberattack not only delayed ticketing but also caused more than half an hour’s delay for 24 domestic flights by overwhelming JAL’s network infrastructure. This event has shaken the global aviation industry highlighting the imperative necessity of rapid measures.

Cyber attack, JAL's network infrastructure, Japan, a series of malfunctions, aviation industry, JAL, disruptions — © Shimin Gu

Cyber attack on JAL’s network infrastructure

The attackers launched a distributed Denial-of-Service (DDoS) attack to overwhelm JAL’s network infrastructure. They flooded the system with an excessive amount of traffic, hoping to numb the airline’s operational capabilities. Fortunately, they did not cause malware infection or any data breach. This reassured customers that their personal information remained secure. Nevertheless, the impact was significant. It disrupted the travel plans of numerous travellers and posed serious questions about the readiness of airlines to handle such digital threats.

JAL’s IT team rapidly responded to mitigate the attack’s effects, and they resumed full system operations shortly after. The airline also apologized for the inconvenience caused to passengers and assured that efforts were underway to resolve the issue. Currently, nine flights have been delayed due to the system failures, with further disruptions expected. In addition, JAL posted a statement on the social media platform X (formerly Twitter), confirming the breach.

We have been under cyberattack on our internal and external network devices, causing problems with the systems that communicate with external systems. We expect this to affect both domestic and international flights.

Strengthening defences against cyber threats

The recent cyberattack on Japan Airlines highlights the significant challenges that such incidents pose to the aviation industry. However, the Japanese government swift reaction is noteworthy. Particularly, Chief Cabinet Secretary Yoshimasa Hayashi directed JAL to repair its systems quickly.

This action addressed customer concerns effectively and emphasised the seriousness with which such threats are treated. Interestingly, other major carriers like ANA Holdings and regional airlines such as Skymark Airlines and Star Flyer reported no issues. This highlights that the attack exclusively targeted JAL. However, the series of malfunctions extended beyond the airline itself. Japan Post Co. confirmed that mail and parcel deliveries were affected due to JAL’s flight delays.

As the aviation industry becomes increasingly reliant on interconnected systems, this incident raises important questions. How can airlines better protect their operations to avoid similar disruptions? Share your thoughts in the comments below.