Aeroflot Strengthens Cybersecurity After Major Hacker Attack
Russia’s flagship airline Aeroflot has expanded its operational cybersecurity capabilities and brought in specialized security partners following a large-scale cyberattack last year that forced the cancellation of dozens of flights.
After the cyberattack at the end of July 2025, Aeroflot carried out a major overhaul of its information-security infrastructure. The airline connected specialized cybersecurity firms BI.ZONE and Bastion to continuous network-perimeter monitoring and scanning operations. At the same time, the company has been expanding its cybersecurity operations center within its IT subsidiary AFLT-Systems. The unit is focused on strengthening defensive barriers and improving rapid-recovery mechanisms after incidents.
According to Popov, the company now evaluates risks of internal-network compromise in real time using EDR solutions designed for endpoint detection and response. The focus is not only on preventing attacks, but also on responding rapidly once threats emerge.
The incident dates back to late July 2025, when Aeroflot’s information systems suffered a major disruption. Russia’s Prosecutor General’s Office later determined that the outage had been caused by a cyberattack. As a result, the airline was forced to cancel 49 pairs of flights to and from Moscow.
