Hawaiian Airlines investigates cyberattack disrupting operations
Hawaiian Airlines has confirmed that it was the target of a cyberattack earlier this week, prompting an ongoing investigation and renewed concerns about the cybersecurity challenges facing the aviation industry.
The breach, which occurred on June 24, forced the airline to take several internal systems offline as a precaution. While flights continued without major delays, employees and customers experienced disruptions, especially when checking in or contacting support.
Airline confirms cybersecurity incident
According to Hawaiian Airlines, the company activated its cybersecurity response plan immediately after detecting the incident. The airline also brought in external forensic experts to assist with the investigation and informed federal law enforcement agencies.
Although the airline has not shared technical details about the attack, it has emphasized that flight operations remained unaffected and that there is currently no evidence that customer or payment data was compromised.
In its latest update, the airline confirmed that some systems were still being restored and that additional security measures were being implemented to prevent further intrusion.
“We immediately activated our incident response plan, engaged forensic experts and notified law enforcement,” the airline said in a public statement.
Ransomware suspected
Although Hawaiian Airlines has not confirmed the nature of the attack, cybersecurity experts believe it may have been a ransomware incident. The symptoms, including a sudden IT shutdown, loss of internal functionality and a delayed recovery process, align with known ransomware attack patterns. Although no threat group has claimed responsibility so far, the absence of a ransom note or public statement from attackers leaves room for speculation.
The investigation is still underway, and the airline has stated it will provide updates as more information becomes available. If you want to understand how ransomware attacks typically unfold and why they remain such a persistent threat, you can learn more in our guide to ransomware.
Rising threats to the aviation industry
The incident underscores a troubling trend in the aviation sector. Airlines are increasingly being targeted by cybercriminals due to the high value of passenger data and the operational importance of their digital systems.
In the past year alone, several major carriers have experienced similar disruptions, ranging from data breaches to ransomware attacks affecting flight scheduling and airport operations.
While many attacks are financially motivated, others stem from political or ideological causes. Earlier this year, the hacktivist group Anonymous targeted GlobalX Airlines in protest of deportation flights, exposing how even lesser-known carriers can be pulled into geopolitical conflicts. You can read more about that incident in our article on the Anonymous cyberattack against GlobalX.
Attacks on airlines not only threaten customer privacy but can also create cascading operational challenges, especially if booking platforms, baggage systems or internal communication tools are affected.
The importance of cyber resilience
This cyberattack highlights the need for ongoing investment in cyber resilience across critical sectors. While preventive measures such as firewalls and employee training are essential, organizations must also be prepared to respond effectively when an incident does occur.
Hawaiian Airlines’ swift response limited the impact on passengers, but the attack serves as a reminder that no organization is immune. A well-prepared incident response strategy, combined with transparency and communication, is crucial for maintaining trust during and after a breach.
The airline has not commented on whether the attackers gained access through phishing, credential abuse or another method, but officials are working closely with investigators to identify the root cause.
As the airline continues restoring full functionality, it has reassured customers that safety remains its top priority.

Sarah Krarup
Sarah studies innovation and entrepreneurship with a deep interest in IT and how cybersecurity impacts businesses and individuals. She has extensive experience in copywriting and is dedicated to making cybersecurity information accessible and engaging for everyone.
View all posts by Sarah Krarup