Skip to content

Harrisburg International Airport PA system intrusion

Summary

Susquehanna Area Regional Airport Authority logo

An unauthorized recording played over Harrisburg International Airport’s terminal public-address system for about 10 minutes on Oct. 14, 2025. Airport staff stopped it and police investigated. One outbound Delta flight was delayed roughly 35–40 minutes as a precaution; officials reported no broader operational disruption or threat.

Key facts

Timeline

  • Incident start:
    ? Earliest known or assessed start of malicious activity or incident activity.
  • First public signal:
    ? Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity.
  • First public cyber evidence:
    ? Earliest credible public information connecting the incident or disruption to malicious cyber activity.
  • Official cyber disclosure:
    ? First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related.
  • Last impact seen:
    ? Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
  • Incident end:
    ? Confirmed or defensibly assessed end of material operational disruption or incident activity.

Primary victim organization

Critical infrastructure sector

Incident characteristics

Assessments

Operational impacts

Incident narrative

Analyst assessment

Harrisburg International Airport officials told WGAL an unauthorized user caused a political recording to play over the terminal public-address system for about 10 minutes Oct. 14, 2025. DysruptionHub reported the incident the following day. The airport’s IT staff stopped the broadcast, and airport police investigated. The public record establishes unauthorized access to the PA system but does not establish the technical access path or a named perpetrator.

Operational significance

The message disrupted terminal announcements. Airport spokesman Scott Miller said one outbound Delta Air Lines flight was delayed about 35 to 40 minutes while the aircraft was searched as a precaution. It departed safely. Miller said there was no broader interruption of airport operations or continuing threat. No other Harrisburg flight delays were substantiated.

Location and operator

The airport authority’s public-address procurement record identifies the Susquehanna Area Regional Airport Authority as HIA’s owner and operator. The airport uses a Middletown mailing address, but Pennsylvania airport zoning records and SARAA material locate the airport in Lower Swatara Township, Dauphin County. The township place relationship anchors the affected terminal; it does not mean township government systems were compromised.

Limits

The unauthorized message referenced political causes, but that content alone does not establish responsibility by a specific group. Similar broadcasts at Canadian airports are separate events; the reviewed material does not prove a common actor or a shared technical vulnerability. There is no evidence in these sources of ransomware, personal-data access or other HIA system compromise.

Organizations involved

Impacted location

Sources

Harrisburg, Pa., airport PA system hijacked; flight delayed

DysruptionHub reported the terminal broadcast intrusion and one precautionary Delta flight delay.

Airport officials say cyberattack at HIA 'wasn't a threat'

Miller said unauthorized audio played about 10 minutes, IT removed it, police investigated and one outbound Delta flight was delayed roughly 35-40 minutes as a precaution.

Harrisburg airport speakers hacked to play unauthorized messages

Airport officials said an unauthorized user accessed the public-address system and played a recording; there were no threats to passengers or facilities.

Pennsylvania Airport Zoning Status

PennDOT identifies Harrisburg International Airport with Lower Swatara Township in Dauphin County.

See something that needs correction?

Signed-in members can report an error, update, or missing source.