Business Context and Reporting Period
This Form 8-K is a current report filed by RTX Corp on September 19, 2025, regarding a product cybersecurity incident. The report details a ransomware attack affecting the company's Multi-User System Environment (MUSE) passenger processing software, which supports airline check-in, gate resources, and baggage handling at airports.
Key Financial Metrics
The filing does not provide specific financial data such as revenue, profit, cash flow, margins, debt, or liquidity figures. The document focuses exclusively on the operational and legal implications of the cybersecurity event.
Material Changes and Operational Impact
- Incident Nature: Ransomware detected on MUSE systems operating on customer-specific networks outside the RTX enterprise network.
- Operational Disruption: Affected customers have shifted to backup or manual processes, resulting in flight delays and cancellations.
- Response Actions: RTX activated its incident response plan, engaged internal and external cybersecurity experts, and notified law enforcement and government agencies.
- Financial Materiality: Management states that the incident has not had a material impact and is not reasonably expected to have a material impact on the Company's financial condition, business operations, or results of operations.
Outlook, Risks, and Contingencies
While the current assessment indicates no material financial impact, the filing outlines several risks and contingencies that could alter this outlook:
- Investigation Uncertainty: Ongoing assessment may reveal additional information regarding the scope of the incident.
- Remediation Costs: Potential for additional costs related to investigation and remediation efforts.
- Legal and Reputational Risk: Exposure to regulatory inquiries, litigation, and reputational damage affecting relationships with customers, employees, and regulators.
- Forward-Looking Statements: The company disclaims any obligation to update these statements, noting that actual results may differ materially due to the factors listed above.
Investor Verification Checklist
- Verify the ongoing status of the MUSE system remediation and the timeline for full restoration of automated services.
- Monitor for any future disclosures regarding litigation, regulatory fines, or specific remediation costs that may arise from the incident.
- Assess the extent of customer attrition or contract renegotiations resulting from the flight delays and cancellations.
- Review subsequent 10-Q or 10-K filings for any updates on the financial materiality of the incident as the investigation concludes.