Cyberattack causes a flight delay? Airlines won’t owe you a hotel or meal
A new DOT rule exempts airlines from providing meal vouchers or hotels for cyberattack-caused delays if carriers comply with applicable cybersecurity regulations.
A Department of Transportation rule published in September 2026 adds "cybersecurity attacks" to a list of 10 "not controllable" flight disruption causes, creating a new delay tracking category and relieving compliant airlines of customer service obligations like meal vouchers and hotels. The rule stems from the FAA Reauthorization Act of 2024 and applies only when carriers demonstrate compliance with applicable cybersecurity regulations. Consumer groups reacted cautiously: FlyersRights criticized the lack of public comment, while the National Consumers League saw both certainty benefits and risks from ambiguous wording. The article cites prior aviation incidents including Scattered Spider's airline attacks and the 2024 Collins Aerospace hack that disrupted European flights.
- Rule adds cyberattacks to 10 "not controllable" delay causes in a new DOT delay-tracking category.
- Amenity and compensation waivers apply only if the carrier complies with applicable cybersecurity regulations.
- Rule implements the FAA Reauthorization Act of 2024, which directed DOT to make these changes.
- FlyersRights criticized the change as issued without public comment; National Consumers League gave mixed views.
- Aviation ISAC praised the rule's cybersecurity incident reporting elements.
- Tags
- airlinesaviationconsumer-protectioncybersecurity-compliancedepartment-of-transportationfaaregulation
- Vendors
- CrowdStrikeCollins Aerospace
- Threat actors
- Scattered Spider
From the original article
5 min read at cyberscoop.com
A Department of Transportation rule published last week says that airlines complying with cybersecurity regulations will have reduced customer obligations in the event of an attack. The post Cyberattack causes a flight delay? Airlines won’t owe you a hotel or meal appeared first on CyberScoop.
By Tim Starks · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.