Delta Airlines is investigating an incident on a flight from Las Vegas to Atlanta where a passenger reportedly deployed a rogue Wi-Fi network, leading to the deactivation of the aircraft's Wi-Fi system and a subsequent federal investigation. The incident occurred on Delta flight 591, which departed Harry Reid International Airport on Monday, August 10, 2026, after the conclusion of the DEF CON cybersecurity conference in Las Vegas.
According to Delta spokesperson Morgan Durrant, the cabin crew deactivated the aircraft's Wi-Fi functionality for approximately 30 minutes after realizing a passenger had set up an unauthorized network. Durrant confirmed that the flight's safety was never compromised and no aircraft operating systems were affected. Delta is conducting a full investigation and is collaborating with federal law enforcement and aviation regulators.
Messages from the aircraft's Communications Addressing and Reporting System (ACARS) indicated that the crew informed ground personnel about a passenger creating a network named "Delta WiFi Fast" and attempting to defraud other passengers. Social media posts detailing the incident went viral, claiming the rogue network could be used to steal sensitive data.
The Atlanta office of the FBI and the Federal Aviation Administration (FAA) have acknowledged awareness of the incident but have not provided further comment. The Transportation Security Administration (TSA) and Homeland Security Investigations (HSI) have not yet responded to inquiries.
The incident exhibits characteristics of an "evil twin" attack, a method where an attacker creates a fraudulent Wi-Fi access point that mimics a legitimate network's name and settings. Such attacks can trick devices into connecting to the rogue hotspot, allowing the attacker to monitor unencrypted internet traffic, perform man-in-the-middle attacks, or present spoofed login portals to harvest credentials and personal information.
The timing of the incident, occurring on a flight departing Las Vegas immediately after the annual DEF CON cybersecurity conference concluded on Sunday, August 9, 2026, has drawn particular attention. The flight itself was delayed, originally scheduled for Sunday but not departing until 8:30 a.m. Monday.
