RTX Ransomware Hits MUSE — Flight Delays

On 2025-09-24 RTX reported that its MUSE passenger-systems software was hit by ransomware, producing service interruptions and flight delays for airlines that rely on the platform. The incident disrupted routine passenger handling and scheduling processes tied to the affected software, prompting carriers to implement contingency procedures. RTX provides systems and services to commercial and military customers through business units including Collins Aerospace, Pratt & Whitney and Raytheon. Collins Aerospace supplies aircraft systems and passenger solutions for commercial operators; passengers and commercial operators are therefore the most directly affected customer group in this incident. RTX has not disclosed the full technical scope, recovery timeline, or potential remediation costs as of this report date. For investors, the near-term considerations are operational and reputational: ongoing airline disruptions can prompt customer claims, service credits, or remediation costs. Cybersecurity incidents are already listed among the company's risks, and this event underscores that exposure. The company’s disclosure cadence and remediation progress will be key inputs for assessing any material financial impact.

RTX’s business mix provides perspective on exposure. In 2022, Collins Aerospace represented roughly 31% of net sales (approximately $20.6 billion), with Pratt & Whitney contributing another 31% and Raytheon-related businesses accounting for the balance. Commercial aerospace recovery and aftermarket services are growth levers for Collins and Pratt & Whitney; interruptions to passenger systems may pressure commercial customers in the near term, though the company’s large defense and government business (45% of total sales in 2022) provides diversification. Key metrics investors should monitor in coming disclosures: - Scope of affected customers and the duration of operational disruption. - Estimated remediation, incident response, and potential customer credits or liabilities. - Any impact on backlog, revenue recognition, or aftermarket service commitments tied to Collins Aerospace. RTX’s reported backlog/RPO and scale in defense contracts can temper single-event revenue swings, but repeated or broad cyber incidents could affect customer trust, contract negotiations, and operational margins over time.

RTX has highlighted cyber threats among its corporate risks. The company is also pursuing digital transformation and Industry 4.0 initiatives aimed at improving operational efficiency. Those programs can increase reliance on software and connected systems, which may expand the attack surface if not matched by robust cybersecurity controls. Investors should watch for management commentary on strengthened controls, third-party forensics, insurance coverage, and any regulatory or customer notifications. Transparent, timely updates will be important to limit uncertainty and assess whether the incident is isolated or indicative of broader IT security gaps.