Hawaiian Airlines Cyber Attack: Flights Kept Running After Systems Were Hit

By John King, CISSP, PMP, CISM   Published: 06/28/25   Updated: 11/10/26   2 min read
Cyber News

Hawaiian Airlines Foils Cyber Attack, Ensures Flights Stay Secure

Summary:

Understanding the Cybersecurity Threat


Airlines depend heavily on technology, and that makes them attractive targets. In late June 2025, Hawaiian Airlines disclosed a cybersecurity event that affected some of its IT systems. Its parent company, Alaska Air Group, reported the incident in a June 27, 2025 filing with the SEC. Flights kept operating safely and on schedule.

Immediate Response and Containment


The airline said it took steps to protect its operations and systems once it found the activity, and brought in outside experts. It also notified the authorities. Hawaiian didn’t publicly describe the attack in detail.

Safety Prioritization and Operational Integrity


Flights were not disrupted. The airline told passengers there was no impact on travel or reservations. That’s the best outcome an airline can hope for. Hawaiian did not say at the time whether any customer or employee data was taken.

Implications for the Aviation Sector


Airlines carry millions of passengers and run complex, connected systems, so attackers keep coming. The Hawaiian incident came as the FBI warned that the Scattered Spider group had started targeting the airline industry. Expect more of these attacks. Airlines need to keep investing in security and in response planning.

The Road Ahead: Ongoing Investigations


The investigation looked at who was behind the attack and how attackers got in. Reporting at the time linked the incident to Scattered Spider, though Hawaiian did not confirm attribution. The FBI was involved in the probe.

Lessons for the Industry


No airline is immune. The Hawaiian incident shows the value of preparation: a team and a plan ready before something goes wrong. Good tools matter. So does knowing exactly who does what when an alert fires.

Lessons for Airlines


Hawaiian Airlines kept planes flying through a cyber incident, but the event is a warning for the whole industry. Airlines that adapt their defenses and learn from incidents like this will be best placed to keep service running. Others should review their own plans now.
Stay Current

Newer CyberExperts coverage on this topic

This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.

Latest Daily Brief

Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer

The fastest way to catch up on what changed after this article was published.

Read Today's Brief

John King, CISSP, PMP, CISM

John King currently works in the greater Los Angeles area as a ISSO (Information Systems Security Officer). John has a passion for learning and developing his cyber security skills through education, hands on work, and studying for IT certifications.