Ransomware attacks in the aerospace industry up 600% in one year

Thales published its latest report on cyber threats to the aviation sector on June 13, 2025. The findings show a staggering 600% increase in ransomware attacks targeting the aerospace supply chain over the past year. Between January 2024 and April 2025, researchers identified 27 major cyberattacks carried out by 22 different ransomware gangs.

One third of these incidents targeted the United States, though Europe, Asia, and Latin America were also affected. In most cases, the attackers didn’t stop at encrypting systems to demand a ransom. Their tactics increasingly include industrial cyber-espionage, sabotage of sensitive technologies, and the theft of high-value data such as diplomatic flight plans and confidential cargo routes.

Thales also notes that state-backed groups are playing a growing role in these attacks, particularly those originating from Russia, Iran, China, and North Korea. Their targets have included air traffic control systems, aircraft manufacturers, and even the International Civil Aviation Organization.