Critical Infrastructure Security,
Governance & Risk Management,
Operational Technology (OT)
The Vulnerability of Airport Baggage Systems

The airport baggage carousel, often viewed as an inconvenient fixture, represents a significant security concern when perceived through the lens of military strategy. Within such frameworks, these systems emerge as potential vulnerabilities that could be exploited by foreign adversaries aiming to disrupt military mobilization efforts across the United States.
In scenarios of conflict, particularly with nations like China, the U.S. military’s reliance on civilian infrastructure—including airports, railroads, and ports—becomes evident. Intelligence assessments have indicated that these transport hubs could be primary targets in cyberattacks, particularly during heightened tensions.
Recent cyber incidents illustrate these vulnerabilities. The ransomware attack at Seattle-Tacoma International Airport demonstrated how interconnected IT and OT systems could falter, affecting services such as baggage handling, ticketing, and information displays, and causing widespread disruption as flights were delayed nationwide.
Experts warn that, despite having dedicated cybersecurity teams, major airports still face significant risks due to budget constraints, outdated infrastructure, and technical liabilities. Smaller airports, often lacking dedicated cyber staff, are even more susceptible to breaches, making them prime targets for malicious actors.
Retired military officials have noted that civilian aviation systems, particularly in times of war, serve as critical resources for troop and material transportation. With numerous commercial airlines integrated into initiatives like the U.S. Air Force’s Civil Reserve Air Fleet, an attack on these systems could hamper military operational capabilities drastically.
Cybersecurity professionals also face challenges in maintaining oversight of operational technology systems at airports, which can often become obscured in the fold of rapidly evolving network architectures. Experts emphasize that over time, systems originally designed with tight operational isolation can lose that separation, leaving them vulnerable to compromise.
Threats extend beyond baggage handling; runway lighting systems are particularly susceptible to cyber manipulation, which could lead to disastrous outcomes during critical landing procedures, especially under challenging weather conditions. The ability to disrupt the functionality of such systems represents a substantial national security risk.
As geopolitical tensions, particularly regarding Taiwan, escalate, the urgency to fortify cybersecurity measures within airports and other civilian infrastructures has never been more pressing. Malicious entities will likely continue to seek ways to exploit these vulnerabilities, necessitating a comprehensive approach to cybersecurity that addresses both IT and OT environments.