Ransomware Attack Disrupts Kuala Lumpur Airport

May 6, 2025

INCIDENT

A cyberattack on Kuala Lumpur International Airport's (KLIA) systems caused a disruption lasting several hours on Sunday March 23. The incident, which began in the early hours, rendered the airport's flight information display system, check-in counters and baggage handling inoperative. Airlines and airport staff were forced to switch to manual operations. Initial findings suggested a cyber intrusion compromised KLIA's critical systems. Malaysian Prime Minister Anwar Ibrahim called the disruption "quite heavy" and said that a ransom demand for $10 million had been refused.

Qilin claimed the attack, but the airport has not verified this. Qilin says it stole 2 TB of data from Kuala Lumpur International Airport in the attack.

Incident Date

March 23, 2025

Location

Malaysia

Estimated Cost

$10M ransom demand refused

Type of Malware

No Malware identified

Threat Source