UK Air Traffic Boss Rules Out Cyber Attack After Major Disruption

The head of the United Kingdom’s air traffic control provider has publicly ruled out a cyber attack as the cause of this week’s major systems failure, even as passengers and airlines continue to grapple with cancellations and delays across the country’s busiest airports.

Technical glitch behind mass cancellations, not hostile actors

Published coverage on the disruption indicates that a fault in the flight data processing system at National Air Traffic Services (NATS) triggered widespread restrictions on departures from major UK airports on 8 September 2026. The issue sharply reduced the number of flights that could be handled safely, forcing airlines to cancel or delay hundreds of services in and out of Heathrow, Gatwick, Manchester and other hubs.

Reports from flight-tracking platforms and news outlets point to around 1,000 flights cancelled on the first day of the outage, with additional cancellations and knock-on delays over subsequent days as schedules struggled to recover. Some passengers were stranded on aircraft for hours or required to bed down overnight in terminal buildings as airport operations slowed to a crawl.

According to publicly available statements from the company and government briefings, NATS has characterised the event as a technical problem in its flight processing systems rather than an intrusion affecting radar or radio communications. The disruption is being described as the most significant impact on UK air traffic since an earlier NATS system failure in 2023, placing renewed scrutiny on the robustness of the country’s aviation infrastructure.

Coverage from international outlets notes that the outage affected not only domestic services but also long-haul routes, including flights connecting the UK with Europe, North America and India. Airlines reported crews and aircraft out of position across multiple airports, extending the disruption long after the immediate system fault was contained.

Air traffic control chief moves to reassure public

NATS chief executive Martin Rolfe has become the public face of the response, with interviews and written statements stressing that investigators have found no evidence of malicious interference. According to published accounts of his comments, Rolfe has said that the organisation can rule out a cyber attack and is focusing instead on an internal systems failure within the flight data processing environment.

International and UK-based media report that Rolfe has apologised for the disruption and pledged what he describes as a thorough and time-bound investigation into the root cause. He has also emphasised that safety margins were maintained throughout the incident, with traffic flows reduced to levels that controllers and systems could manage reliably while the problem persisted.

Transport coverage in several outlets indicates that the UK government has given NATS roughly one week to provide an initial technical explanation of the failure. Regulators have also been tasked with conducting an independent review of the performance and resilience of the air traffic control systems, raising the prospect of recommendations on software, redundancy and crisis response procedures.

At the same time, reports highlight growing political and public pressure on NATS leadership, with some airline executives and commentators questioning whether previous lessons from earlier outages were fully implemented. Rolfe has faced calls in some quarters to consider his position, even as he continues to oversee the internal inquiry.

Cyber fears swirl online as officials stress alternative causes

In the early hours of the disruption, speculation on social media and online forums quickly focused on the possibility of a cyber attack, particularly given previous cyber incidents affecting European aviation and broader geopolitical tensions. Posts shared widely during the outage referenced earlier ransomware events and historic cyber incidents at European airports, fuelling concern that the UK’s airspace might be facing a similar threat.

However, subsequent reporting from mainstream outlets and specialist aviation coverage has consistently stated that both NATS and government departments consider a cyber attack to be highly unlikely in this case. Publicly available briefings reference internal diagnostic data and the specific behaviour of the systems during the failure as pointing instead to a non-malicious technical glitch.

International media have also contrasted the UK event with known cyberattacks against airline and airport IT providers in recent years, noting that the current disruption appears to have originated within a core air traffic control function rather than outsourced passenger or check-in systems. That distinction is being cited as a reason why the operational impact was particularly severe, affecting flight flows across the country rather than individual carriers or terminals.

Analysts quoted in published commentary suggest that the incident will nonetheless add weight to ongoing calls for stronger cyber resilience, given how critical digital systems have become to safe and efficient air travel. Even in the absence of hostile activity, the outage is being held up as an example of how software failures alone can create nationwide aviation disruptions.

Recovery continues as airlines count the cost

By 10 September, reports indicated that air traffic levels were gradually returning toward normal, though with hundreds of additional cancellations and delays as airlines repositioned aircraft and crews. Data cited by several outlets show that more than 2,000 flights in total have been cancelled since the initial glitch, with Heathrow and Gatwick bearing a significant portion of the impact.

Airlines are now dealing with the complex task of reaccommodating passengers, clearing backlogs and handling compensation claims. Travel industry coverage suggests that the financial cost is likely to be substantial, with carriers facing expenses related to hotel accommodation, rebooking, crew overtime and lost revenue on cancelled services.

Consumer advocates quoted in media reports have drawn attention to passengers’ rights under UK and European regulations, particularly where airlines may be liable for care and assistance even when the root cause lies with air traffic control. Some carriers have warned customers to expect ongoing disruption over several days while operations stabilise.

Airport operators, meanwhile, are reported to be reviewing their contingency plans after images of crowded terminals and long queues circulated widely. The episode has prompted fresh debate about whether additional buffers or alternative routing options are needed to keep traffic moving when centralised systems fail.

Regulators and industry face renewed questions on resilience

The latest outage has revived scrutiny of previous NATS incidents and broader questions about the resilience of air traffic management in a highly digitised environment. Commentators have drawn comparisons with the 2023 NATS failure and other international system outages, suggesting a pattern of vulnerabilities linked to complex software dependencies and ageing infrastructure.

According to recent analysis carried in technology and aviation journals, modern air navigation systems rely on intricate layers of software for flight planning, separation and coordination across national boundaries. While this complexity supports high traffic volumes, it also introduces the risk that a fault in one critical component can cascade into widespread operational restrictions, even when fundamental safety systems remain intact.

Regulatory bodies in the UK are now expected to examine whether current oversight sufficiently addresses these systemic risks. Media reports indicate that the Civil Aviation Authority has been asked to assess the robustness of NATS’ systems and to consider whether stronger redundancy requirements or more frequent stress testing may be needed.

For passengers and airlines, the answers will be measured less in technical detail than in future reliability. As flights slowly return to regular patterns, the central question emerging from this episode is how quickly industry and regulators can translate the findings of the investigation into practical improvements that reduce the likelihood of another large-scale shutdown, regardless of whether the trigger is a cyber threat or an internal software fault.

ABC News: Airport chaos continues in UK as traffic controller given one week to investigate outage cause

MercoPress: UK air traffic control failure leaves close to a thousand flights canceled

Evening Standard: NATS chief given week to explain Heathrow and Gatwick flight chaos