A major cyberattack targeting Russia’s flagship airline Aeroflot grounded over 100 flights and exposed massive data vulnerabilities in a blow that signals a growing front in digital warfare.
TLDR:
- Aeroflot canceled and delayed over 100 flights following a cyberattack confirmed by Russian authorities.
- Pro-Ukrainian group Silent Crow and Belarusian Cyber-Partisans claimed responsibility for the attack.
- Hackers say they destroyed 7,000 servers and accessed sensitive data of millions of passengers.
- The incident is one of the most damaging cyberattacks on Russian critical infrastructure since the Ukraine war began.
What Happened
Russia’s national airline Aeroflot suffered a major disruption on July 28, 2025, after a cyberattack by hacktivist groups Silent Crow and Cyber-Partisans paralyzed its IT systems. Over 100 flights were canceled, affecting thousands of passengers domestically and internationally. The attack left the airline’s website, customer service systems, and internal communication networks inaccessible, forcing authorities to launch a criminal investigation and drawing sharp reactions from Russian lawmakers and the Kremlin.
Cyberattack Brings Down Aeroflot’s Operations
Aeroflot reported IT failures early Monday, later confirmed by Russia’s Prosecutor’s Office as the result of a deliberate cyberattack. While Aeroflot initially canceled 54 round-trip flights, The AP reported that confirmed the real number surpassed 100, with additional delays affecting hundreds more. The attack also disrupted operations at Aeroflot subsidiaries Rossiya and Pobeda. International routes to Belarus, Armenia, and Uzbekistan were among those affected. Moscow’s Sheremetyevo Airport, one of the busiest in Russia, was overwhelmed as departure boards flashed red, leaving travelers stranded with no clear guidance from the airline.
Hacktivist Groups Claim Responsibility
Two prominent hacktivist groups, Silent Crow, believed to be Ukrainian, and the Belarusian Cyber-Partisans, took credit for the attack. Both groups issued celebratory statements:
- “Glory to Ukraine! Long live Belarus!” Silent Crow declared.
- Cyber-Partisans posted:
“We are helping Ukrainians in their fight with the occupier, carrying out a cyber strike on Aeroflot.”
Silent Crow revealed that the operation was a year-long infiltration campaign that exploited human vulnerabilities to gain deep access to Aeroflot’s network. They claimed to have destroyed 7,000 servers, gained access to internal computers, surveillance footage, and even intercepted employee conversations. Their most chilling threat: the release of personal data of every Russian who has ever flown Aeroflot. Screenshots allegedly from Aeroflot’s internal network were published, and both groups suggested that restoring the systems could cost the company tens of millions of dollars.
Kremlin Concern and Global Fallout
Kremlin spokesman Dmitry Peskov called the situation “alarming,” and lawmakers echoed the sentiment. Anton Gorelkin, a senior parliament member, warned that Russia is under full-spectrum digital attack, suggesting foreign influence behind the hacktivists. Meanwhile, passengers were left venting their frustrations online. One traveler wrote: “The flight has been rescheduled for the third time… it was supposed to depart at 5:00!” Another complained that Aeroflot’s app, website, and call center were all offline. Aeroflot has promised refunds and rebooking options once systems are back online, but recovery may take time.
Trump Moves Deadline Amid Attack
In a related political twist, President Donald Trump announced he was shortening his deadline for Russia to sign a peace deal with Ukraine. Previously giving Russia 50 days, Trump cut it to “10 or 12 days from today,” citing a lack of progress and recent Russian attacks on Kyiv. He warned of secondary tariffs and fresh sanctions if Moscow fails to comply, adding pressure on the Kremlin amid already severe fallout from the cyberattack.
SQ Magazine’s Takeaway
Honestly, this is one of the most serious cyber incidents I’ve seen in recent months. It’s not just about delayed flights or frustrated passengers. The attack exposed just how vulnerable critical infrastructure can be when modern security isn’t prioritized. And it’s a bold, in-your-face message from hacktivist groups that digital warfare is now mainstream. The combination of a technical takedown and a political push from Trump makes this a defining moment in the ongoing Russia-Ukraine conflict. If Aeroflot’s customer data really gets leaked, it’s not just PR damage. It’s a national embarrassment.
