ENAV Data Network Failure Halves Italy’s Flight Capacity, Contributes to 192 Cancellations

A failure in the data network supporting Italy’s air traffic control services cut national flight-handling capacity to about 50% on Friday, October 16, 2026. By noon local time, aviation analytics company Cirium had counted 192 cancellations across the country, according to AeroTime. Italy’s air navigation provider, ENAV said its secondary satellite network kept controllers operating, but it could not carry the normal volume of traffic.

The disruption demonstrates the difference between preserving a safety-critical service and preserving its full operating capacity. ENAV’s backup prevented a complete suspension of air traffic control, yet airlines and passengers still faced cancellations and delays because the reduced-capacity system could not accommodate the scheduled morning traffic.

ENAV said its backup arrangements initially allowed normal operations to continue. Restrictions became necessary at 06:00 local time as traffic increased and the network fault persisted. The provider reduced the number of flights that could be handled to roughly half the normal level, affecting airports across Italy, including Rome Fiumicino and Milan Malpensa.

By noon, only around 31% of departures nationwide had left on time. The corresponding figures were 25% at Milan Malpensa and 28% at Rome Fiumicino. Passengers using airports serving Rome, Milan and Bergamo were among those most affected, while airport operators ADR and SEA advised travelers to verify flight information directly with their airlines.

The control equipment remained operational

ENAV identified the problem as a fault in the data-transmission network connecting supporting systems. It said the air traffic control equipment itself continued to operate normally and showed no anomalies. The provider also ruled out malicious activity.

That separation is important to understanding the engineering problem. Controllers did not lose the functioning control systems described by ENAV; they lost the primary network capacity needed to exchange supporting data at the level required for the complete national schedule. The secondary satellite connection maintained continuity, but operating limits were required to keep traffic within what that alternative network could support.

Redundancy therefore worked in its most fundamental role: avoiding a nationwide shutdown. It did not provide an identical substitute for the primary connection. In practical terms, the backup protected the availability of air traffic control while transferring the disruption into reduced flight throughput. Airlines then had to operate within a smaller national capacity envelope, producing cancellations, delays and sharply reduced on-time performance.

This is a consequential boundary in the design of resilient infrastructure. A backup can preserve the essential function without reproducing the primary system’s full performance. For passengers, that distinction is visible in whether flights operate as scheduled. For the network operator, it is visible in the staged capacity limits needed until the higher-capacity primary service returns.

Capacity recovered in stages

ENAV worked with external service providers while technicians investigated and repaired the fault. AeroTime identified telecommunications company TIM as the supplier responsible for managing and maintaining the data network. ENAV did not assign a final cause to TIM; it said it was coordinating with suppliers to identify and resolve the anomalies.

As the recovery progressed, ENAV increased national flight-handling capacity from about 50% to 75%. That intermediate step indicates that restoration was managed as a controlled return of throughput rather than an immediate switch from restricted service to normal operations.

Later that day, ENAV confirmed that the primary data-transmission network had been restored and reinstated 100% operational capacity. Flight schedules then began moving back toward normal, although the earlier cancellations and delays continued to affect passengers and airline operations.

The sequence from initial backup operation, to a 50% restriction, then 75% capacity and finally full restoration shows both the value and the limit of the satellite fallback. It kept Italy’s air traffic control service available throughout the fault, but normal national traffic did not return until the primary data network did.

By Thomas Caldwell — AMI’s senior editor for mechanical and mobility engineering, covering vehicle electronics, systems integration, electrification, chassis systems, propulsion, and safety policy.