Executive Brief
- RTX Corporation disclosed a ransomware cybersecurity incident affecting its MUSE passenger processing software on September 19, 2025 (Item 8.01).
- The MUSE system supports multiple airlines sharing airport check-in and gate resources, including baggage handling, and operates on customer-specific networks separate from RTX’s enterprise network (Item 8.01).
- RTX activated its incident response plan immediately, involving internal and external cybersecurity experts, and notified law enforcement and government agencies (Item 8.01).
- Customers have shifted to backup/manual processes, causing certain flight delays and cancellations (Item 8.01).
- RTX states the incident has not had and is not expected to have a material impact on its financial condition, operations, or results (Item 8.01).
- Forward-looking statements caution about risks including potential regulatory inquiries, litigation, remediation costs, and reputational impacts related to the incident (Item 8.01).
- No other Items or exhibits were filed with this 8-K (Item 8.01).
- Next steps include ongoing investigation and remediation; no specific timelines or financial impacts disclosed (Item 8.01).
- Key risk to monitor: potential escalation of incident impact, regulatory or legal consequences, and operational disruptions (Item 8.01).
Item-by-Item Analysis
Item 8.01 – Other Events
- What happened: RTX Corporation became aware on September 19, 2025, of a ransomware cybersecurity incident impacting its MUSE passenger processing software used by multiple airlines at airports.
- Parties/terms: The affected software supports airlines sharing check-in and gate resources, including baggage handling. The MUSE system operates on customer-specific networks, separate from RTX’s enterprise network.
- Conditions/response: RTX activated its incident response plan, engaged internal and external cybersecurity experts, notified domestic and international law enforcement and government agencies, and is providing technical support to affected customers.
- Operational impact: Customers have switched to backup/manual processes, resulting in certain flight delays and cancellations.
- Financial impact: The incident has not had and is not reasonably expected to have a material impact on RTX’s financial condition, business operations, or results.
- Forward-looking statements: The filing includes extensive cautionary language about risks related to the incident, including potential discovery of additional information, remediation costs, regulatory inquiries, litigation, and reputational harm.
- Source: (Item 8.01, entire section).
Exhibits Summary
- None attached.
Financial & Dilution Impact
- Unknown; RTX states no material impact to date and none reasonably expected.
Timeline & Required Actions
- Incident detected September 19, 2025.
- Investigation and remediation ongoing.
- No specific timelines or milestones disclosed.
Risks & Monitoring
- Potential escalation of cybersecurity incident impact.
- Possible regulatory inquiries or litigation.
- Operational disruptions affecting airline customers.
- Remediation and investigation costs.
- Reputational damage.
Metadata & Quality Checks
- No OCR or parsing issues noted.
- Forward-looking statements present (Item 8.01).
- No non-GAAP financial measures referenced.
- No conflicts or related-party transactions disclosed.
Final Checklist
- Items disclosed: 8.01 only.
- Exhibits: None.
- Financial impact: None material or disclosed.
- Forward-looking statements: Yes, with detailed cautionary language.
- Next steps: Ongoing investigation and remediation.
- Risks: Cybersecurity, regulatory, operational, reputational.
Summary
RTX Corporation reported a ransomware incident on its MUSE airport passenger processing software on September 19, 2025. The company is actively responding and investigating, with no current material financial or operational impact, but warns of potential risks including regulatory and litigation exposure. Customers have experienced some flight delays due to fallback to manual processes. The situation remains fluid with ongoing remediation efforts.