Cyber Incident Victim: Copenhagen Airport
Date:
Feb 2024
Location:
Denmark
Summary
A hacker attack targeted Copenhagen Airport's website, disrupting access to flight information and parking booking services. Passengers were advised to use the airport's official mobile app for real-time travel updates instead. Parking reservations were temporarily impacted, but travelers needing to reach the facility within a few hours were permitted to park without prior booking during the incident response period.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On February 25, 2024, Copenhagen Airport confirmed via its official social media account that its primary website, http://cph.dk, had been compromised by a hacker attack. The incident disrupted critical passenger services, including real-time flight information updates and online parking reservation systems. Travelers attempting to access the airport’s website for journey details or to book parking spaces were unable to use these functions. The airport immediately instructed affected passengers to switch to its mobile application, available in app stores under "CPH Airport," for flight status information. For those arriving at the airport within the next few hours, the facility temporarily waived pre-booking requirements for parking, allowing direct access to parking areas without reservations. No additional technical details about the attack vector, duration, or threat actor were disclosed in the initial announcement.
Copenhagen Airport’s operational response focused on mitigating passenger inconvenience while its website remained offline. The mobile app became the primary channel for flight-related communications, though parking booking functionality was still impacted. The airport emphasized that physical operations, including security and flight schedules, continued unaffected, with no reports of broader logistical disruptions. The incident’s public advisory did not specify a timeline for full website restoration or elaborate on technical recovery efforts. Consequences were limited to digital service accessibility, particularly affecting passengers reliant on last-minute parking reservations or web-based flight updates. The airport’s direct call for app usage and parking adjustments indicated a targeted containment strategy to maintain customer mobility despite the cyber intrusion.