NATS traces UK air traffic disruption to isolated software defect, rules out cyber-attack

UK air navigation services provider NATS has attributed September’s widespread flight disruption to a previously unknown software defect, according to a preliminary report published on 18 September, while ruling out foul play or external interference.

The 8 September failure, which affected the flight-data system at the London Area Control centre, forced restrictions across UK airspace for roughly six hours and led to the cancellation of more than 2,000 flights. Passengers faced days of knock-on delays and cancellations.

A millisecond coding fault with national consequences

NATS chief executive Martin Rolfe said the problem was traced to “a small subsection of coding” in the system that allocates codes to individual aircraft when manual requests are made. According to the report, while a manual code request was being processed, the system received a higher-priority message that paused the request. When processing resumed, the defect caused it to resume incorrectly, corrupting the output and affecting subsequent flight-data updates — all “in the space of a millisecond”.

Because flight data within the national airspace system had been corrupted, NATS imposed UK-wide restrictions for six hours so the system could be restarted and data reloaded. Notably, the underlying fault only affected flights operating above 24,500ft within the London Area Control centre.

Rolfe’s foreword to the 18-page report confirms the incident is unrelated to the 2023 flight-plan system failure or the July radar issue, and was not caused by incorrect actions by military or civil operators. The report also dismisses a “malicious actor or cyber-related activity” and media speculation about military involvement.

Industry reaction and accountability questions

Airlines UK, which represents UK carriers, pushed back sharply. Chief executive Tim Alderslade said airlines had “picked up the pieces – and the tab” of the failure while NATS “faces no real consequences”, calling on the UK Civil Aviation Authority’s review to mandate investment in NATS’ resilience.

NATS was ordered to investigate by transport secretary Heidi Alexander, with a full report due within a week; a major incident report is expected within 60 days. Interim mitigation is in place while a permanent fix undergoes safety testing.

The episode underscores how software reliability has become a critical operational and financial variable across the aerospace and defence-adjacent sector — a space where listed suppliers such as National Presto Industries (NPK), which operates a defence products segment alongside its housewares business, also compete. Shares of NPK closed at $144.01, down 1.72% on the day, with a market capitalisation of roughly $1.06 billion.

What to watch

• NATS’ full major incident report, due within 60 days of the preliminary findings
• Outcome of the UK Civil Aviation Authority’s review, including any mandated resilience investment
• Progress of airline compensation claims following the disruption
• Deployment timeline for the permanent software fix, currently in safety testing

Source: original release