2025-09-24 RTX Corp Cybersecurity Incident

Page last updated on September 24, 2025

RTX Corp initially disclosed a cybersecurity incident in an SEC 8-K filing on 2025-09-24 09:08:33 EDT.

Company Summary

RTX Corporation is a U.S.-based multinational aerospace and defense conglomerate that develops and manufactures advanced systems and services for commercial, military, and government customers worldwide.

Incident Details

Material: No
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date: Unknown
Detected Date: 2025-09-19
Disclosure Date: 2025-09-24
Contained Date: Unknown
Recovered Date: Unknown

Attack Goal: Unknown
Attack Tactics¹: TA0040
Attack Techniques¹: T1486

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2025-09-24

RTX Corp filed an 8-K at 2025-09-24 09:08:33 EDT
Accession Number: 0000101829-25-000036

Item 8.01 Other Events.

On September 19, 2025, RTX Corporation (the “Company”) became aware of a product cybersecurity incident involving ransomware on systems that support its Multi-User System Environment (“MUSE”) passenger processing software. This software enables multiple airlines to share check-in and gate resources at airports, including baggage handling. The MUSE airport systems operate outside of the RTX enterprise network, residing on customer-specific networks.

Upon detecting the incident, the Company activated its incident response plan and promptly took steps to assess, contain, respond to and remediate the incident. The Company is diligently investigating the incident with the assistance of internal and external cybersecurity experts and has notified domestic and international law enforcement authorities and certain other government agencies.

The Company is also communicating with its customers and other stakeholders and providing technical support and guidance to affected airlines and airports. Our customers have shifted to back-up or manual processes and have experienced certain flight delays and cancellations.

While our investigation and assessment of this product cybersecurity incident is ongoing, it has not had a material impact and is not reasonably expected to have a material impact, on the Company’s financial condition, business operations or results of operations.

Company Information