South African Aviation Authorities Investigate Ransomware Incident on Air Traffic Control Network

South African aviation authorities confirmed on September 30, 2026, that a cyberattack involving ransomware has been deployed on at least one operational air traffic control network. The incident has caused potential disruption to air traffic control operations and raised concerns about the security of aviation infrastructure. In response, the authorities are seeking external cybersecurity assistance to address the incident, assess the extent of the compromise, and restore affected systems. The specific ransomware variant and detailed exploitation methods have not been disclosed in the initial reporting. This incident adds to a growing trend of cyberattacks targeting critical aviation infrastructure. Officials have not confirmed the full scope of disruption, and verification from South African civil aviation or dedicated cybersecurity authorities is pending.