FEDERALItem 8.01 · voluntaryMalwareTechnologyManufacturingInformationRansomwareData EncryptedLowActive

RTX CORPORATION

bd_4d6a2fc67bcf4b5a · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 19, 2025

Filed

Sep 24, 2025

To disclose

5 days

Affected

Not disclosed

Confidence

67%

Full breach record for RTX CORPORATION →2 incidents on file

RTX Corporation became aware on September 19, 2025 of a product cybersecurity incident involving ransomware affecting its Multi-User System Environment (MUSE) passenger processing software. The incident impacted airport systems operating on customer-specific networks, causing flight delays and cancellations as customers shifted to back-up or manual processes. RTX activated its incident response plan, engaged cybersecurity experts, and notified law enforcement. The company stated the incident had not had, and is not reasonably expected to have, a material impact.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 days

Sep 19, 2025

Discovered

Sep 24, 2025

Filed

vs. sector median

18 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: RTX CORPORATION
norm: rtx
SEC CIK: 0000101829

Name: RTX CORPORATION
norm: rtx
SEC CIK: 0000101829
Industry: TechnologyllmManufacturingllm

Discovered: Sep 19, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: notified domestic and international law enforcement authorities and certain other government agencies

During the incident: Activated its incident response plan
Took steps to assess, contain, respond to and remediate the incident
Investigating the incident with the assistance of internal and external cybersecurity experts
Notified domestic and international law enforcement authorities and certain other government agencies
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 days(5 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/101829/000010182925000036/rtx-20250919.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Sep 24, 2025
Raw hash: 9223eb408075465b0cc60f5a0f27b03132022c9356b8dba45639744179a41f3c

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html31.2 KB

Download View at source

Reporting entityRTX CORPORATION

Victim entityRTX CORPORATION

Incidentdiscovered Sep 19, 2025

Stated responseActivated its incident response plan

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing