UK Air Traffic Controller NATS Blames Millisecond Software Glitch for Cancellation of Over 2,000 Flights

NATS, the organisation that operates the UK's air traffic control system, released a preliminary report on Friday attributing the cancellation of more than 2,000 flights into and out of the United Kingdom on September 8 to a millisecond-duration software defect rather than human error. The disruption stranded hundreds of thousands of travellers on runways and in airport terminals for hours and took days to fully resolve.

The defect was located in the National Airspace System, which allocates codes enabling air traffic controllers to identify flights on radar. NATS chief executive Martin Rolfe said the problem was traced to "a small subsection of coding" within the flight data system, and confirmed it was unrelated to a previous outage in 2023 or a radar issue last July. Mitigation measures are in place while a permanent fix is tested and deployed. Rolfe apologised for the disruption and said it was not the result of "any incorrect actions by either military or civil operators." The incident prompted calls for his resignation.

UK Transport Secretary Heidi Alexander met with Rolfe after the disruption and ordered NATS to complete a full investigation. "I have now received NATS' report and, while I am pleased to see that the safety of passengers was protected, it's clear we need to urgently understand why this issue was not discovered and fixed before it caused chaos," she said. Alexander has also tasked the Civil Aviation Authority with conducting an independent review of NATS' findings and examining its investment plans to enhance resilience and regulatory accountability. The UK government holds a 49% stake in NATS, the largest shareholder position, with veto power over key decisions; airlines, airports, investors and employees own the remaining shares in the public-private partnership.

Air traffic control systems concentrate enormous operational risk into a small number of core software components, and this case shows how a fault measured in milliseconds inside a code allocation system can idle an entire national airspace for days. The flight data system that assigns identification codes to aircraft on radar is not a peripheral tool but a precondition for controllers to work at all, so a defect there does not degrade capacity gracefully — it removes it.

How the sector absorbs this kind of failure depends on governance as much as engineering. NATS' structure, with government holding a 49% stake and veto power alongside airline, airport, investor and employee owners, means the response runs through both a technical fix and a political one, with the Transport Secretary ordering an investigation and the Civil Aviation Authority now reviewing NATS' own findings and its resilience investment plans independently.

What happens next turns on two separate questions: whether the permanent fix eliminates the specific coding fault without introducing new risk elsewhere in the flight data system, and what the CAA's independent review concludes about why the defect went undetected before it triggered nationwide disruption. Rolfe's position and any changes to NATS' investment plans are likely to hinge on that second answer.